A mechanism to express the organization associated with the data served up by an instance operating in server mode would be helpful. This may be different than the publisher of the capability statement, e.g. in multi-tenant hosting models.

I suggest adding a managingOrganization element to parallel the Endpoint resource, as the definition of that element captures this idea: "The organization that manages this endpoint (even if technically another organisation is hosting this in the cloud, it is the organisation associated with the data)."