A cloud-based system is described for producing application deltas based on application recipes that identify components of the application deltas using unique identifiers, without the recipe containing all or any content of the actual application. The application recipe can be conveyed to an organization operating on an enterprise network, where the application recipe can be matched with application files in the organization's backup storage containing copies of content of endpoint devices on the network to retrieve components identified by the recipe and produce the application delta for the application. Subsequently, the application delta can be used as an installation package to perform IT operations such as installing the application on endpoint devices.