Which organisation should be used for 'custodian' vs 'author'

Is the author the end user organisation or the system suppliers organisation?

The “custodian” is meant to be the supplier responsible for maintaining the pointer and interacting with NRL.

The “author” is meant to be the end user organisation that created the ‘document’.