The GVIP team

Elina Eickstädt

Elina is part of the GVIP Core Group since 2026 
Elinas background spans auditing, enforcement of tech regulations, IT security, Software Engineering, and the interplay of tech and society. 
In her volunteer capacity as a Spokesperson of the Chaos Computer Club, she is working on topics such as digital rights, surveillance, protection of encrypted communications, and EU policies broadly focused on the regulation of technology. In her Podcast “Dicke Bretter,” she explains tech policy in progress.

Piotr Karwasz

Piotr P. Karwasz

Piotr is an open-source software developer and consultant. A lifelong enthusiast of open-source software, he transitioned from a 17-year career in mathematics research to launch Copernik.eu in 2017—an IT consultancy specializing in backend Java development.

Since 2022, he has been an active contributor to the Apache Software Foundation, serving as PMC Chair of the Apache Logging project (including Log4j) and as Vice President of Ecma Relations.

His involvement with Software Bill of Materials began in 2023, when—sponsored by the Software Tech Agency—he joined an 18-month initiative focused on strengthening the security of the OSS projects he maintains. He is currently engaged in multiple efforts to advance the adoption of SBOMs and VEX within the ASF ecosystem, and is an active member of the OWASP Transparency Exchange API working group.

Sal Kimmich

Sal Kimmich is a security architect and AI governance consultant working at the intersection of open source security, supply chain integrity, and emerging agentic systems. Right now they are working with the nono open source project as they co-chair the OpenSSF BEAR Working Group, serve as Policy Manager and International Ambassador at OpenUK, previously sat on the FCC Technical Advisory Committee and served as Technical Community Architect at the Linux Foundation’s Confidential Computing Consortium. Sal is an active contributor across the OpenSSF and CNCF ecosystems, focused on making vulnerability data, provenance, and trust signals usable across real-world software supply chains. Through Gadfly AI, Sal advises organizations on security architecture and compliance for AI-integrated systems. Sal co-maintains the CHAOSS Foundation Stats project and contributes to research measuring the gap between declared and exercised capabilities in AI agent tooling.

Olle E. Johansson

Olle E. Johansson

Olle E. Johansson (oej) is a consultant in the area of CRA, PKI, real-time communication and in embedded system security. He has been active in Open Source for many years as a developer, evangelist, trainer, and speaker in many conferences worldwide. Olle is a member of SBOM Europe and the OWASP CycloneDX working group. He is currently leading the work on the CycloneDX Transparency Exchange API standard (Koala) and is a member of the ECMA International TC54 group, standardising system and software transparency.

In the past, Olle was an active core developer in the Asterisk.org project, co-founder of the Astricon conference and creator of the Asterisk certifications and trainings. He has been a contributor to the Kamailio.org open source SIP proxy for many years.

As a CRA expert, Olle is a member of the ORCWG Steering group.

Olle is the founder and CEO of Edvina AB, founded in 1987. He lives in Sollentuna, Sweden.