Enterprise & teams

Licensing and deployment for organisations

BowTie Risk is native Apple software that runs on the device. It deploys through Apple Business Manager and MDM. This page covers how to license it for a team, how it is deployed, and what a security review needs to know.

Licensing

Licensing options

The software is free to deploy. A licence unlocks access to all premium features. For a smaller team, it may be easier to use individual subscriptions on the home page.

Team — invoiced
The App Store app, paid for centrally
Available now
Quoted
Annual subscription. Volume discount from 5 seats.
✓One invoice to your organisation
✓Bank transfer, purchase order accepted
✓We issue subscription codes, your team redeems them
✓Named contact for renewals and support
✓Seat follows the person, not the role
Enterprise edition
A separate build of the app, licensed outright
Available now
Per seat, once
A capital purchase rather than a subscription. Priced on request.
✓Bought inside your own Apple Business Manager
✓Invoiced by Apple, through your existing account
✓Licence held by the organisation, not the employee
✓Deploys already unlocked — no codes, no paywall
✓Contains no payment, entitlement or analytics components
✓We need your Organization ID to set it up
Volume via Apple
The App Store app, bought as seats
Expected late 2026
Per seat
Tiered subscription pricing, falling as seat count rises.
✓Found and bought in Apple Business Manager directly
✓Seats assigned through your existing MDM workflow
✓Billed and renewed by Apple, alongside your other apps
✓Seats owned by the organisation and reclaimable
✓Also available through Apple School Manager
Bespoke build
Built and branded for your organisation
By arrangement
Quoted
Development fee plus licence. Scoped before any commitment.
✓Your organisation's name, icon and colours
✓Your risk matrix, consequence descriptors and categories built in
✓Starter templates for your hazards and control sets
✓Report layouts matched to your existing documents
✓Workflow changes specific to your process
✓Distributed privately to your organisation, not on the App Store

Apple announced at WWDC 2026 that subscriptions will become available for volume purchasing through Apple Business Manager and Apple School Manager, with seats assigned through existing device and identity management workflows, arriving late 2026. For a large deployment this may be preferred.

Deployment

Available through Apple Business Manager

BowTie Risk appears in Apple Business Manager Apps and Books as a free download. App Store licences sync to your MDM automatically, and the app deploys to managed devices. The licence purchased under one of the routes above unlocks it.

Works with your existing MDM

Deploys through Jamf Pro, Kandji, Microsoft Intune, Mosyle, Addigy and other MDM platforms that support Apple volume purchasing.

Device-based assignment

Licences can be assigned to devices rather than to people, so no Apple Account needs to be signed in on the device.

For your security review

Security and data handling

This covers BowTie Risk as deployed across an organisation. BowTie Risk has no backend and there is no server of ours holding your risk data.

✓Data residency — diagrams, registers and reports are held on the device by default. Content leaves it only where a user chooses to save or export to a permitted location.
✓No sub-processors for your content — no third-party service stores or processes your data. The App Store edition uses Apple and RevenueCat for subscription validation only; the enterprise edition contains neither.
✓No content analytics — we do not track what you build, open or export. No advertising SDKs. In the App Store edition, subscription status is the only thing transmitted; the enterprise edition transmits nothing.
✓Encryption at rest — inherited from macOS and iOS device encryption (FileVault / Data Protection).
✓Code integrity — every release is code-signed and reviewed through Apple's App Store process.
✓Export — PDF, CSV and JPEG at any time. Content is not locked to the application.

On breach notification and data processing agreements: because we neither receive nor store your risk content, there is no processing relationship covering it. If your procurement process requires a completed vendor security questionnaire or a written statement to that effect, send it through and we will complete it.

The full technical and compliance checklist is provided on the Bowtie Risk Software page →

IT reference

Deployment reference

Details required for a deployment ticket or vendor record. If something is missing, let us know and we will add it.

ItemDetail
Distribution Mac App Store and iOS App Store, free download with premium unlocked by subscription. The enterprise edition is distributed privately to a named organisation through Apple Business Manager.
Architecture Universal — Apple silicon and Intel.
Network egress Not required for any core function. Diagram editing, risk assessment, reporting and export all work with the device offline, and no allow-list entry is needed for the app to be usable. The App Store edition contacts Apple and RevenueCat to validate subscription entitlement, and continues against its cached entitlement if they are unreachable. The enterprise edition makes no outbound connections.
Authentication None. No accounts, no SSO, no directory integration, no identity provider.
Data storage Local by default, inside the app's sandboxed container. We operate no sync service and no server of our own.
Sub-processors App Store edition: Apple, for payment processing and subscription billing, and RevenueCat, Inc. (USA), for subscription entitlement validation. Both receive purchase and device metadata only. Neither receives diagrams, risk assessments, reports or document content. Enterprise edition: none. It contains no payment or entitlement components.
Cloud & network storage Users may save or export to any location the system file picker offers, including a mapped network drive, a corporate file share or iCloud Drive. That storage is yours, governed by your own policies and MDM controls — we are not a party to it and receive nothing.
Permissions File access only where a user explicitly chooses a save or export location. No camera, microphone, contacts, location or full-disk access.
Export formats PDF, CSV, JPEG. CSV import also supported.
Updates Delivered through the App Store. Timing controlled by your MDM's app update policy.
Uninstall Standard MDM app removal. Local data is removed with the app container.
Accessibility Built on native AppKit and SwiftUI controls, inheriting system accessibility including VoiceOver and Dynamic Type.
Support contact contact@bowtierisk.app
Privacy policy bowtierisk.app — no personal information is collected, stored or transmitted.
Licence terms Apple's standard End User Licence Agreement for App Store applications. Read terms →
Common questions

Procurement and IT.

Can we trial it before committing?
Yes, and you do not need to ask us. The free tier lets anyone build a working bowtie diagram on any device. For a broader pilot across a team, get in touch and we will arrange access for the evaluation period.
What happens to our diagrams if we stop subscribing?
They stay on your devices. Reverting to the free tier restricts creating and editing beyond the free limit, but existing work is not deleted and export remains available. There is no server that can be switched off.
Do you offer education pricing?
Yes, by arrangement. BowTie Risk is available through Apple School Manager, but the premium tier is licensed separately, so institutional rates for universities, TAFEs, flight schools and maritime academies are quoted directly rather than published.
Can we share diagrams between team members?
Files can be shared the way your organisation already shares files — a mapped network drive, SharePoint, iCloud Drive, Google Drive, or email. There is no live collaboration or shared workspace, and no BowTie Risk server involved.
Do you support Windows?
No. BowTie Risk is native Apple software for Mac, iPad and iPhone. If your risk team runs Windows, we are not the right tool.
Which licensing route should we pick?
For smaller quantities, individual subscriptions are usually simplest. From around five to twenty seats, the invoiced route suits. Where the organisation must hold the licence, or a capital purchase is required, the enterprise edition applies at any size. For a large deployment that can wait until later this year, Apple's volume purchasing may be preferred. Where the app itself needs to reflect your own risk framework, branding or process, a bespoke build is scoped separately. Describe your situation and we will be pleased to tell you which fits.
Does the app send anything to a third party?
Only what is required to determine whether a subscription is active. Apple handles the purchase and RevenueCat validates the resulting entitlement. Both receive purchase and device metadata. Neither receives risk content, and the app has no pathway by which a diagram could reach either of them.
Will you complete our vendor security questionnaire?
Yes. Send it through and we will return it completed.

Talk to us about your team

Include seat count, platforms, and whether you deploy through MDM. We will respond with a quote and any documentation your IT or procurement team requires.

contact@bowtierisk.app

Based in Australia. Procurement and security enquiries are answered directly.