In this case it should be the PA-DSS. From the PCI page: 'Payment applications that are sold, distributed or licensed to third parties are subject to the PA-DSS requirements.'