The telling element is that, both in the release and in meetings with the press, IBM is including resellers who work with companies of fewer than 1000 employees.
It will require an app-specific PIN and in the first release, all payment card credentials will be encrypted and stored on a chip, called the secure element, that is separate from the Android device memory and is only accessible by authorized programs.