android for work
If you configure your devices in work-managed device mode then it only has the apps you push.
Our devices have about 20 apps in the Google Play store, nothing else is available. The only apps there by default are the browser and the dialler. Everything else, maps, email, SMS etc. has to be specifically approved by the MDM administrator.
It's quite nice to see a brand new Android load up without any of the non-removable pre-installed rubbish.