Even if it was a well built app, anyone that's built an app for an F500 company, knows the hoops you have to jump through for things like compliance.
There's a good chance the app did what it was supposed to just fine, but Delta couldn't sign on because it didn't have Reporting Requirements, SOC2 Compliant or a litany of other things that an Enterprise would require to sign on.