For development, Apple signs a certificate that lets you sign your own binaries, plus a provisioning profile that the phone uses to determine if it can run the app.

Presumably for the corporate version, they just give you a certificate you can use to sign, and one that you put on company phones so they're willing to run your software.