If you know the UDIDs of the devices, and add them all to the provisioning profile, you could then have the app on the company website - biggest issue is that if anyone changes their phone, you'll have to do another build to include the UDID, though. If you want the example plist file that's needed to deliver an ipa from the webserver, I can post that
You could - though it's strictly against the terms - have a version on Testflight, with people being invited by Apple ID instead. You'd have to upload a new one every 90 days, and at some point, I guess Apple might wonder why it's never going beyond beta...