CoAuthor Technical Diagram
CoAuthor Deployment Overview
CoAuthor deployment consists of three main components:
Certara Admin (CAD):
Function: Serves as the license manager for Certara products.
Authentication: Users must log in using Single Sign-On (SSO) or a username and password.
Management: Administers user access and product licenses.
CoAuthor Server:
Platform: A Linux server with a Kubernetes deployment.
Components: Hosts CoAuthor and the GPT model used by CoAuthor.
Communication: All interactions within the CoAuthor website use HTTP to connect to various locally running APIs.
Security: Documents are secured by the Sponsor and Project under which they were created.
Storage: Utilizes persistent storage volumes managed by Kubernetes for document storage and retrieval.
CoAuthor Word Add-in:
Functionality: Enables users to work with CoAuthor sources and prompts directly within Microsoft Word.
Access Management: Managed by your organization's IT team through the Microsoft Office 365 Admin Center.
Communication: The Add-In communicates with the CoAuthor API via HTTP to prompt the GPT model and access sources used during document creation.
Integration: Seamlessly integrates with Word to provide a user-friendly interface for document editing and collaboration.
Document Access and Security
WebDAV Protocols: When users open documents created in CoAuthor, WebDAV HTTP protocols are used to enable local access and editing in Word, while the document itself remains stored on the CoAuthor server.
Data Encryption: All data transmitted between the CoAuthor Add-In and the server is encrypted using TLS (Transport Layer Security) to ensure data integrity and confidentiality.
API Security: The CoAuthor API employs OAuth 2.0 for secure authentication and authorization of API requests.
Backup and Recovery: The CoAuthor server includes automated backup and recovery mechanisms to protect against data loss.
AI Processing and Data Transmission
In its standard configuration, CoAuthor's AI model and retrieval-augmented generation (RAG) pipeline run within the CoAuthor Server environment. Customer-submitted source documents, prompts, and generated content are not transmitted to external third-party AI services as part of standard processing. This configuration is confirmed as part of every CoAuthor implementation.