1. An apparatus, comprising: a communications module; a storage device storing instructions; and at least one processor coupled to the communications module and the storage device, and configured to execute the instructions to: receive, from a device through the communications module, a request to generate an instance of an application, the request comprising information identifying first information-technology assets, the first information-technology assets comprising a first executable application part; in response to the received request, determine that the first information-technology assets are consistent with a permissioning or compliance policy; obtain first data associated with the first information-technology assets in response to the determination, the obtained first data characterizing functionalities of the first information-technology assets; detect, based on the obtained first data, an incompatibility between the functionality of the first executable application part and a functionality of a first programmatic interface associated with a subset of the first information-technology assets; in response to the detected incompatibility, identify a second executable application part having a functionality that is compatible with the functionality of the first programmatic interface, the second executable application part being consistent with the permissioning or compliance policy; generate the application instance based on the subset of the first information-technology assets, the first programmatic interface, and the second executable application part; and transmit, through the communications module, information associated with the generated application instance to the device, the generated application instance being executable by the device.