Open Source in Finance Forum Toronto 2026

Financial institutions are navigating an unprecedented convergence of regulatory frameworks that demand both operational resilience and algorithmic transparency. The European Union's Digital Operational Resilience Act (DORA), EU AI Act, ISO AI Management Framework and the Securities and Exchange Commission's cybersecurity disclosure rules—while distinct in origin they are increasingly intersecting in practice, creating compliance complexity that traditional siloed approaches cannot adequately address.

This session examines how open source frameworks and tooling like SPDX Knowledge Graphs are emerging as essential infrastructure for this new regulatory reality. We will demonstrate by using use case studies at Canadian banking institutions the need for financial institutions to move from passive compliance documentation to active supply chain intelligence. This includes practical approaches for legacy mainframe integration and vendor management strategies, which balance AI Act transparency requirements with protection of proprietary trading algorithms.