OSFF London 2025

The Open Source in Finance Forum (OSFF) is the premier event bringing together leaders and technologists across financial services and the open-source ecosystem. This conference is uniquely designed to enable partnerships, advance talent development and showcase open technologies enabling the financial industry to scale, modernize, and enhance profitability.

 

 

OSFF LONDON 2025 VIDEOS

The Open Source in Finance Forum (OSFF) is the premier event bringing together leaders and technologists across financial services and the open-source ecosystem. This conference is uniquely designed to enable partnerships, advance talent development and showcase open technologies enabling the financial industry to scale, modernize, and enhance profitability.

 


KEYNOTE VIDEOS

Welcome + Opening Remarks - Gabriele Columbro
Welcome + Opening Remarks - Gabriele Columbro
Welcome + Opening Remarks - Gabriele Columbro, Executive Director, FINOS & General Manager, Linux Foundation Europe
FINOS' New Horizon: From Readiness to ROI - Madeleine Dassule
FINOS' New Horizon: From Readiness to ROI - Madeleine Dassule
FINOS' New Horizon: From Readiness to ROI - Madeleine Dassule, Chair, FINOS GB & Independent Advisor (Retired Partner, Chief Information Officer, Wellington Management)
The Regulated Era of Open Source - Gabriele Columbro
The Regulated Era of Open Source - Gabriele Columbro
The Regulated Era of Open Source - Gabriele Columbro, Executive Director, FINOS & General Manager, Linux Foundation Europe
The CRA and Linux: What it Means for Us - Greg Kroah-Hartman, Fellow, Linux Foundation
The CRA and Linux: What it Means for Us - Greg Kroah-Hartman, Fellow, Linux Foundation
With the ratification of the Cyber Resilience Act (CRA) in Europe, there has been a lot of misunderstanding of what this means for Linux developers, Linux users, and manufacturers of devices with Linux inside of them. This talk will attempt to provide a rough understanding of the issues involved, who is affected, and what this means for everyone in our ecosystem.
OSFF London Keynote Slides

Follow along with all of the action at OSFF London with the slides from the keynote presentations.

An Open Source AI Powered Industry

 


Leveraging Modern Agentic AI Platforms for Financial Services Automation & Innovation - Jochen Papenbrock, NVIDIA
Leveraging Modern Agentic AI Platforms for Financial Services Automation & Innovation - Jochen Papenbrock, NVIDIA
This presentation will highlight the potential of Agentic AI to revolutionize financial services, including task automation, enhanced data analysis, and improved decision making. Relevant open source tools and models will be presented and their application in financial systems will be demonstrated.
Practical Use of AI Agents in Finance With Example - Ranadip Chatterjee, Google
Practical Use of AI Agents in Finance With Example - Ranadip Chatterjee, Google
Gen AI agents and agentic architectures are the talk of the day. But, in practice, how do we get real business benefits from this hyped tech? Here we go through a practical example in Financial Services on how agents can be used for real business benefits. Includes a demo of a real world usecase.
AI Adoption: A Human Problem - Colin Eberhardt, Scott Logic
AI Adoption: A Human Problem - Colin Eberhardt, Scott Logic
This talk will take a broad look at the current challenges surrounding AI adoption and explore what we as both people and organisations need to do to become truly AI-ready. We’ll also highlight the latest efforts from FINOS, including the release of the AI Governance Framework v1, a significant milestone on the journey to successful AI adoption.
Amplify AI Productivity and Trust With Morphir - Attila Mihaly, Morgan Stanley
Amplify AI Productivity and Trust With Morphir - Attila Mihaly, Morgan Stanley
AI-powered code generation holds great promise, but how can we ensure correctness, transparency, and trust—especially in financial software? This session explores how Morphir, an open-source framework for domain modeling and business logic, integrates with AI to boost productivity while maintaining rigor. 

Guarding the Vaults

 

Open Source Maturity - OSS Value Creation Through Regulatory Compliance - Marcel Scholze & Katharina Grauf, PwC GmbH Germany
Open Source Maturity - OSS Value Creation Through Regulatory Compliance - Marcel Scholze & Katharina Grauf, PwC GmbH Germany
This talk will introduce an Open Source Maturity Model designed to align the value creation potential of Open Source Program Offices (OSPOs) with the regulatory demands of the EU Digital Operational Resilience Act (DORA) and the EU Cyber Resilience Act (CRA), alongside industry standards.
Trust but Verify: Fixing Broken Licensing Compliance in SBOMs - Abdullah Garcia, J.P. Morgan
Trust but Verify: Fixing Broken Licensing Compliance in SBOMs - Abdullah Garcia, J.P. Morgan
Attendees will gain insights into best practices for verifying SBOM data, mitigating legal and security risks, and improving compliance workflows. Join me to learn why an SBOM without integrity verification is meaningless—and how to fix it.
Open Source Software as a Balance Sheet: Using AI to Quantify the ROI of Open Source Security - Tobias Heldt & Josh Taboga, XOR
Open Source Software as a Balance Sheet: Using AI to Quantify the ROI of Open Source Security - Tobias Heldt & Josh Taboga, XOR
Despite millions invested in cybersecurity tools, financial institutions struggle to understand, measure and mitigate their open source risk exposure, leaving them vulnerable and uncertain about ROI to invest in Open Source. Open Source as a Balance Sheet empowers OSPOs, cybersecurity, and financial leaders to turn open source from an unknown liability into quantifiable, strategic financial assets.
Beyond Threat Modelling: Formal Verification for Cloud Native Infrastructure - Francesco Beltramini, ControlPlane & Luca Viganò, King's College London
Beyond Threat Modelling: Formal Verification for Cloud Native Infrastructure - Francesco Beltramini, ControlPlane & Luca Viganò, King's College London
In this talk, we will: Highlight the limits of traditional threat modelling in providing security guarantees, Explain how formal methods can verify cloud native systems and deliver provable security guarantees, Guide the audience through assessing unknown threats and show how standards like FINOS Common Cloud Controls mitigate both known and unknown threats.

Mutualizing Risk & Compliance in the Open

DORA: How To Balance Compliance With Innovation - Monica Sasso, Red Hat
DORA: How To Balance Compliance With Innovation - Monica Sasso, Red Hat
The Digital Operational Resilience Act (DORA) is a game-changer for the EU financial services industry, establishing uniform ICT risk management, incident reporting, and third-party risk regulations. Unlike previous sector-specific frameworks, DORA mandates a horizontal implementation across entire firms, ensuring a ‘Minimum Viable Bank’—continuity of critical services amid disruption.
K8s vs. Agent Smith: Exploding GPUs and the AI Governance Framework - Andrew Martin, ControlPlane
K8s vs. Agent Smith: Exploding GPUs and the AI Governance Framework - Andrew Martin, ControlPlane
In a broad and detailed appraisal of end-to-end AI security for FINOS members we examine how to run LLM agent workloads on Kubernetes using the AI Readiness Governance Framework — without getting lost in the Matrix..
Cloud Compliance vs. Cost Efficiency: Can Fintech Have Both? - Kate Obiidykhata, Percona
Cloud Compliance vs. Cost Efficiency: Can Fintech Have Both? - Kate Obiidykhata, Percona
Regulated fintech organizations must ensure compliance with stringent data regulations while maintaining cost efficiency in the cloud. However, compliance-driven choices—such as data residency requirements, encryption mandates, and audit logging—can lead to hidden costs, especially in cloud storage and database management.
Taming Multi-Cloud Security: Progress on Common Cloud Controls - Michael Lysaght & Sonali Mendis
Taming Multi-Cloud Security: Progress on Common Cloud Controls - Michael Lysaght & Sonali Mendis
Join two project maintainers of the Common Cloud Controls (CCC) project as they showcase how it streamlines the creation of threat-informed controls and integrates them into reusable assets via the Compliant Financial Infrastructure (CFI) project. This session will provide insights into building scalable, open-source security controls that help financial institutions accelerate cloud adoption while maintaining regulatory compliance.

Supercharge Your Open Source Journey

Open Source in Finance: Maintaining the New Strategic Stack - James McLeod, NatWest Group
Open Source in Finance: Maintaining the New Strategic Stack - James McLeod, NatWest Group
This talk explores how projects like Git Proxy, FDC3, the Common Domain Model, Common Cloud Controls, and AI Readiness are building momentum across the industry and how they increasingly rely on each other. What’s emerging is a shared, collaborative infrastructure built by and for the financial services industry.
Navigating Challenges in Open Source and InnerSource Management: From Brea... Carlos Navarro Segarra
Navigating Challenges in Open Source and InnerSource Management: From Brea... Carlos Navarro Segarra
Join us for an engaging lightning session that will delve into the complex challenges of managing Open Source and InnerSource initiatives within a highly regulated landscape. We will examine how to establish effective health assessment criteria that encompass maturity, success, and adoption metrics. 
Strengthening Open Source Engagement: Recognising and Rewarding Contr... Neil McGonigle & John Kelly
Strengthening Open Source Engagement: Recognising and Rewarding Contr... Neil McGonigle & John Kelly
Open source thrives on engagement, yet sustaining long-term contributor involvement remains a challenge—especially within large companies. In this talk, we’ll share how we built a strong internal open source community by recognising and rewarding contributors, reinforcing engagement, and fostering a culture of participation. We’ll walk through the strategies we implemented, from career growth opportunities to conference travel incentives, and the use of gamification.
Opening the Gate: How GitProxy Is Accelerating Open Source Contribu... Thomas Cooper & Dávid Serfőző
Opening the Gate: How GitProxy Is Accelerating Open Source Contribu... Thomas Cooper & Dávid Serfőző
In this session, you’ll hear from two organizations: one just beginning to explore GitProxy and another actively maintaining it. Together, they’ll share share perspectives on the value GitProxy offers, and how multiple banks and tech firms have contributed features, improved security workflows, and shaped a tool that makes open source contribution not only possible, but efficient, auditable, and scalable.

The Business Case for Open Source

Open Eyes, Open Source: Mission-critical Trade Surveill... Michael Gavronsky & Sunjay-Kumar Tripathi
Open Eyes, Open Source: Mission-critical Trade Surveill... Michael Gavronsky & Sunjay-Kumar Tripathi
We plan to present and demonstrate how Timebase was leveraged in the following case studies • Mission critical trade surveillance solution that addresses bank’s trading and regulatory compliance • Demo that examines a market manipulation event to showcase Timebase out of the box capabilities in solving market surveillance challenges
Open Source for Climate Risk: Leveraging OS-Climate’s PhysRisk Libr... Elena de Toledo & Matt Sandoe
Open Source for Climate Risk: Leveraging OS-Climate’s PhysRisk Libr... Elena de Toledo & Matt Sandoe
Meet OS-Climate’s PhysRisk library, an open, transparent, and auditable framework that integrates high-quality climate data with advanced risk modeling techniques. Participants will explore methodologies for evaluating physical climate risks under different climate scenarios across diverse sectors, learning how to integrate geospatial data, vulnerability models, and risk-scoring techniques into their risk assessments. Attendees will gain actionable insights into climate risk quantification and strategic risk management—leveraging open-source tools to build climate resilience across industries.
Using Artificial Intelligence To Fight the Environmental Crisis - Richard Harmon & Steve Tebbe
Using Artificial Intelligence To Fight the Environmental Crisis - Richard Harmon & Steve Tebbe
The EU Artificial Intelligence Act represents a major regulatory milestone, embedding environmental sustainability into AI governance. It introduces principles for developing AI systems sustainably, mandates energy consumption logging for high-risk AI, and requires lifecycle environmental impact assessments. Future efforts must strengthen enforcement to ensure AI development aligns with global environmental goals.
An Open-Source Data Platform for Financial Institutions - Marius Bogoevici, Red Hat
An Open-Source Data Platform for Financial Institutions - Marius Bogoevici, Red Hat
In this presentation we will introduce one of the foundational pieces of OS-Climate Data Commons: its data platform that provides its constituents - producers and consumers of data - with a toolbox for sharing datasets, as well as easily creating and sharing new datasets on the platform.

The Open Connective Tissue of Financial Services

FDC3 for the Web: The Next Evolution in Financial Application Interoperability - Julianna Langston
FDC3 for the Web: The Next Evolution in Financial Application Interoperability - Julianna Langston
FDC3 has revolutionized interoperability in financial services, but until now, its full potential has been limited to desktop containers. FDC3 2.2 changes that by bringing FDC3 to the web for seamless app-to-app communication across any platform for a true “write once, run anywhere” experience—no extensions, no workarounds, just frictionless interoperability.
Many Apps, One Identity : The Power of FDC3 - Yannick Malins, Symphony & Matthew Harvey, NatWest
Many Apps, One Identity : The Power of FDC3 - Yannick Malins, Symphony & Matthew Harvey, NatWest
In today’s fast-paced financial and enterprise environments, users expect a seamless experience as they move between applications. But without a standardized way to share user identity, workflows become fragmented, productivity suffers, and security risks increase. Enter FDC3, the open standard for inter-application communication. In this session, we’ll explore how FDC3 2.3 will allow sharing user identity across applications securely and efficiently—eliminating redundant logins, reducing manual data entry, and enabling a more connected ecosystem.
FDC3 Sub-agents for App Composition - Derek Novavi & Kris West
FDC3 Sub-agents for App Composition - Derek Novavi & Kris West
This talk provides an overview of the motivation, the opportunity, the challenges, and the proposed changes to the FDC3 Standard to enable 'sub-agents' and multiple app scopes - for both browsers and other containers.
Voice-Driven AI Agents for FDC3: Exploring Natural Interfaces for Financial Desktop Integration - Chris Watson, Elgin White
Voice-Driven AI Agents for FDC3: Exploring Natural Interfaces for Financial Desktop Integration - Chris Watson, Elgin White
This presentation explores the integration of AI agents with FDC3 standards through voice interaction, featuring a live demonstration using FINOS SAIL. We'll examine how this approach addresses two UX challenges for financial professionals: the manual selection required in current FDC3 intent resolution and the attention-splitting nature of chat interfaces in trading environments.

Ushering a new Era with the Common Domain Model

 

CDM Extension for Property Collateral & Physical Hazard Risks - Johnny Mattimore & David Kelly
CDM Extension for Property Collateral & Physical Hazard Risks - Johnny Mattimore & David Kelly
The current CDM delivers meaningful workflow and cost benefits for banks. Given the material increase in existing and future exposure that banks have to physical risk events on property assets, extending the CDM will provide comprehensive foundation data fields to support end-to-end workflows for the integration of physical hazards like flood, fire and wind. 
CDM in Motion: New Horizons, Community, and Work... Eteri Dvalishvili, Lyteck Lynhiavu & David Shone
CDM in Motion: New Horizons, Community, and Work... Eteri Dvalishvili, Lyteck Lynhiavu & David Shone
Explore the latest developments and opportunities in the CDM community as we chart new horizons. This session spotlights latest areas of development, evolving governance, active working groups, and how you can get involved. 
Unleashing the Power of CDM: Bridging Integration and Model-Driven Design - Nicholas Moger
Unleashing the Power of CDM: Bridging Integration and Model-Driven Design - Nicholas Moger
Discover how the FINOS Common Domain Model (CDM) can transform your software development lifecycle (SDLC). This session demonstrates the power of object-driven development and forward engineering, going beyond surface-level integration to embrace true model-driven development. We'll unpack advanced features of CDM and Rune, highlight missed opportunities, and provide practical insights for rethinking your SDLC. Break free from black-box development and step into the future of innovation with CDM!
A Guide To Integrating CDM and Digital Regulatory Reporting - Leo Labeis, REGnosys
A Guide To Integrating CDM and Digital Regulatory Reporting - Leo Labeis, REGnosys
This session will demonstrate how users may start integrating CDM within their organisation and benefitting from some of its practical applications, such as ISDA's Digital Regulatory Reporting (DRR). The session will expose recent developments to open-source the mapping technology in the CDM and its underlying DSL (Rune), and how users can start leveraging it for their implementation.

Sign up for more information about FINOS