Open Source in Finance Forum Toronto 2026

You have the AI models. Do you have the license to operate?

As Generative AI moves from sandbox to production, financial institutions face a critical challenge: proving to regulators (OSFI, NIST, EU AI Act) that their AI is safe, fair, and compliant.

Join the FINOS AI Governance community for a dual-track session: an exclusive preview of the new AIGF Leader Training curriculum, followed by a hands-on workshop to co-create the industry standard for AI Reference Architectures and Evaluation Frameworks.

Cloud adoption across financial services continues to accelerate, but inconsistent security controls, fragmented regulatory expectations, and cloud-vendor lock-in are major obstacles to secure, compliant, multi-cloud operations. FINOS Common Cloud Controls (CCC) is an open standard developed collaboratively with financial institutions, cloud providers, and vendors that defines a unified taxonomy, threat model, and machine-verifiable control catalog for cloud services.
Deep dive into the components of CCC, plus an understanding of the implementations of validators and conformant implementations. These will be demoed during Maxime and Eddie's talk at OSFF Toronto, but it will be a deeper dive into how to use the software and contribute improvements.

In this session, TradeHeader will introduce the FINOS Common Domain Model (CDM), helping both business and technical participants with little or no CDM experience take their first steps toward building a CDM-based Java application. As co-creators of the model, we will outline the CDM’s purpose, governance, and core structures such as WorkflowStep, TradeState, and Payouts.
We will show how they work through Java demonstrations of serialization, validation, and product qualification, and highlight how state transitions like Execution or Termination formalize industry-standard events. The session will finish with pointers to the free FINOS CDM Course and source code to kick-start your CDM data journey.

Join us for a hands-on Fluxnova Workshop focused on enhancing the Developer Experience and expanding our sample workflows repository. This collaborative session is designed for developers, engineers, and workflow enthusiasts who want to contribute to the Fluxnova ecosystem.
What We’ll Tackle Together:

1. Identify Gaps in the First-Time Developer Experience: From navigating the Fluxnova website and documentation to installing Fluxnova and its Modeler, we’ll pinpoint pain points and brainstorm improvements to make onboarding seamless.
2. Build Sample Workflows: Help us design and develop investment banking workflows and agentic orchestration examples to enrich the Fluxnova samples repository, making it more robust and practical for real-world use.

Why Attend?

• Contribute on Fluxnova’s developer experience.
• Collaborate with peers and the Fluxnova team.
• Contribute to open-source resources that benefit the entire community.

Bring your ideas, expertise, and enthusiasm—let’s build something great together!

A workshop deep dive into how GitProxy works, how to configure it in your organisation, how to set it up, how to improve it. Should be of interest to OSPOs / Developers in firms wanting to make the most of open source contribution and compliance.

Join our interactive workshop and help shape the future of open standards for SDLC controls in financial services. This session is your opportunity to collaborate with peers and contribute your expertise to the FINOS SDLC Controls Framework.
In regulated industries, delivering software quickly and securely is a constant balancing act between enterprise policies and developer experience. Compliance requirements introduce friction, making automation and security more complex.
In this workshop, we will introduce the Open SDLC Controls Framework working group and have an interactive discussion on industry challenges, common regulatory requirements for software delivery controls and strategies for success.
Last year we established a working group to create a standardized framework for software delivery governance that could transform how financial institutions define their SDLCs.
Building on the success of the Common Cloud Controls and the AI Governance Framework, this initiative aims to develop a shared, composable, and technology-agnostic vocabulary for SDLC controls—a common language that the entire industry can adopt and build upon.