I think contractors working for your company is exactly what the enterprise program is for. Basically the public at large can’t get the app, but your company has a lot more control over its distribution. IIRC they can push updates and of course deactivate it on devices of people who are terminated, that kind of thing.