As matter of fact, this is related to the so-called IP issue. Even though
it is just a review, it is still your IP, which has its "owner" according to
the institute or company policy. From this point, your previous has no
right of it but a "current" address gives them the title to claim it.
My suggestion from my past experience as editor is that you should always
use your current address in your situation unless you have works in this
publication solely on your previous work (in that case, you use previous
address and list your current address as current contact information). You
can invite other coauthor with his/her current address. Since you are in
company, you should inform your supervisor about this invitation and make a
statement that it is not about your current work and you won't use the
working hours. As my understanding, company like to have publications but
not cross the line regarding to the data/project which needs to be
maintained as confidential.
In addition, it may not be a bad idea to invite your supervisor as a
coauthor. Some company even allow this to be listed as your achievement in
the annual report. It benefits everyone. As long as you have the
corresponding authorship at this moment.
Make friends!
