There are mechanisms for sideloading to a limited number of devices. Those mechanisms used to be trivially exploitable to authorize an infinite number of devices, but AFAIK, Apple locked it down a lot more and blocked developers that were doing it quite a while ago.
How does it work? Do you just send ipa files that the user is expected to import into itunes?