Open Source in Finance Forum Toronto 2026

You have the AI models. Do you have the license to operate?

As Generative AI moves from sandbox to production, financial institutions face a critical challenge: proving to regulators (OSFI, NIST, EU AI Act) that their AI is safe, fair, and compliant.

Join the FINOS AI Governance community for a dual-track session: an exclusive preview of the new AIGF Leader Training curriculum, followed by a hands-on workshop to co-create the industry standard for AI Reference Architectures and Evaluation Frameworks.

Cloud adoption across financial services continues to accelerate, but inconsistent security controls, fragmented regulatory expectations, and cloud-vendor lock-in are major obstacles to secure, compliant, multi-cloud operations. FINOS Common Cloud Controls (CCC) is an open standard developed collaboratively with financial institutions, cloud providers, and vendors that defines a unified taxonomy, threat model, and machine-verifiable control catalog for cloud services.
Deep dive into the components of CCC, plus an understanding of the implementations of validators and conformant implementations. These will be demoed during Maxime and Eddie's talk at OSFF Toronto, but it will be a deeper dive into how to use the software and contribute improvements.

In this session, TradeHeader will introduce the FINOS Common Domain Model (CDM), helping both business and technical participants with little or no CDM experience take their first steps toward building a CDM-based Java application. As co-creators of the model, we will outline the CDM’s purpose, governance, and core structures such as WorkflowStep, TradeState, and Payouts.
We will show how they work through Java demonstrations of serialization, validation, and product qualification, and highlight how state transitions like Execution or Termination formalize industry-standard events. The session will finish with pointers to the free FINOS CDM Course and source code to kick-start your CDM data journey.

Join us for a hands-on Fluxnova Workshop focused on enhancing the Developer Experience and expanding our sample workflows repository. This collaborative session is designed for developers, engineers, and workflow enthusiasts who want to contribute to the Fluxnova ecosystem.
What We’ll Tackle Together:

1. Identify Gaps in the First-Time Developer Experience: From navigating the Fluxnova website and documentation to installing Fluxnova and its Modeler, we’ll pinpoint pain points and brainstorm improvements to make onboarding seamless.
2. Build Sample Workflows: Help us design and develop investment banking workflows and agentic orchestration examples to enrich the Fluxnova samples repository, making it more robust and practical for real-world use.

Why Attend?

• Contribute on Fluxnova’s developer experience.
• Collaborate with peers and the Fluxnova team.
• Contribute to open-source resources that benefit the entire community.

Bring your ideas, expertise, and enthusiasm—let’s build something great together!

A workshop deep dive into how GitProxy works, how to configure it in your organisation, how to set it up, how to improve it. Should be of interest to OSPOs / Developers in firms wanting to make the most of open source contribution and compliance.

Join our interactive workshop and help shape the future of open standards for SDLC controls in financial services. This session is your opportunity to collaborate with peers and contribute your expertise to the FINOS SDLC Controls Framework.
In regulated industries, delivering software quickly and securely is a constant balancing act between enterprise policies and developer experience. Compliance requirements introduce friction, making automation and security more complex.
In this workshop, we will introduce the Open SDLC Controls Framework working group and have an interactive discussion on industry challenges, common regulatory requirements for software delivery controls and strategies for success.
Last year we established a working group to create a standardized framework for software delivery governance that could transform how financial institutions define their SDLCs.
Building on the success of the Common Cloud Controls and the AI Governance Framework, this initiative aims to develop a shared, composable, and technology-agnostic vocabulary for SDLC controls—a common language that the entire industry can adopt and build upon.

Running a high-performance computing platform is completely different when you move to the cloud. The emphasis on rapid, intelligent task scheduling to maximise the use of static on-premises compute clusters and the need to provide multi-tenancy at the cluster-level goes away.
In this session, we will present HTC-Grid, an open-source high-throughput compute (HTC) grid system built on top of tried and tested cloud native services.
HTC-Grid recognises that the game has changed and that the traditional schedulers often employed in financial services solve a problem that doesn't exist anymore.  HTC-Grid addresses massive computational demands by combining very high-throughput scheduling, low round-trip latency, and seamless infrastructure orchestration. 
HTC-Grid incorporates learnings from many FSI customer,s re-inventing their grid systems for the cloud. The project was initially developed as an open-source blueprint by AWS, but has been donated to FINOS in order to share the obtained knowledge, provide a reference architecture that can be used to build and adapt a modern high-throughput compute solution, and to incorporate contributions from customers and other CSPs alike.

The workshop will focus on the patent threat landscape in banking and financial services with acute emphasis placed on vulnerability associated with the adoption/use of OSS and ways in which companies in the sector can act to practice effective patent risk mitigation.  The elements of effective patent risk mitigation in this sector include the following:

• Participation in Organized Communities Designed to Innoculate Companies from Patent Litigation - eg. Open Invention Network (OSS-centered cross license), Unified Patents (Open Source Zone), LOTNetwork (Broadbased Anti-Privateering - not OSS specifc), Ad Hoc Licensing Initiatives designed to Limit Licensing Fees (Group Licensing at what is often a Dramatically Reduced Rate that Takes Advantage of Efficiencies), SAIL (soon to be launched generic OIN-style Patent Cross License focused on Foundation Models and is not OSS-specific)
• Prior Art Identification through External Relationships (OIN)
• Post-Grant Invalidation - Ex Parte Revews Designed to Invalidate Existing Patents that Allege to Read on OSS Technologies
• Use of OIN's Uniquely Expandable Linux System Definition (which determines the scope of cross license benefits/obligations among OIN Community Members), which allows for Unrivaled Patent Risk Clearance from the Thousands of Licensee Companies in OIN's Growing Licensee Community
• Pre-Issuance Submissions - identification of prior art designed to limit claim scope or trigger outright rejection of patent applications focused on core OSS technologies
•  Participation in OSS Legal/IP Regional and National Forums to ensure the sharing of best practices and the creation of networks designed to facilitate collaboration in and around patent risk mitigation (also copyright compliance/governance) that mirrors the technical collaboration model that underlies OSS innovation.

In addition to the foregoing discussions, the workshop will include testimonials from a leading company in the banking & financial services sector outlining its own multi-elemented strategies and experiences in ensuring patent risk mitigation in OSS and beyond.

Workshop Participants - Keith Bergelt, CEO, OIN, Raffi Gostanian, CEO, Proactive Patents and Long-standing IP Director at OIN, Mark Paulsen, Open Source Program Office Director, TD Bank