Hisham Al-Falih and the Infrastructure Behind Saudi Arabia’s Open Banking Shift

Hisham Al-Falih has built his career around a part of financial technology that most consumers rarely see.

As co-founder and CEO of Lean Technologies, the Saudi entrepreneur operates behind the apps, merchants and financial platforms that people encounter directly. Lean provides the technical connections that allow authorized businesses to access customer-approved banking data, verify accounts and support digital payments.

That largely invisible position has placed Al-Falih near the center of Saudi Arabia’s transition from experimental open banking to a formally licensed market. In March 2026, Lean became the first company to receive a Major Payment Institution license from the Saudi Central Bank, known as SAMA, to provide open banking services in the Kingdom.

The milestone represented more than regulatory recognition for one company. It signaled that open banking in Saudi Arabia had moved beyond controlled testing and into commercial deployment.

From Engineering to Financial Technology

Al-Falih’s route into fintech did not begin with banking.

He earned a bachelor’s degree in mechanical engineering from Stanford University and participated in the university’s Mayfield Fellows Program, which connects students with technology entrepreneurship. He later worked in venture capital, focusing on fintech investments across the Middle East, Europe and Silicon Valley.

That background gave him a view of both sides of the startup market: how investors assess emerging companies and how founders turn an idea into an operating business.

After spending several years in Silicon Valley, Al-Falih returned to a Gulf market where smartphone adoption was high but the infrastructure supporting digital financial products remained fragmented. Financial apps often had to build separate connections with individual banks, adding time, expense and complexity to product development.

Al-Falih saw that fragmentation as an infrastructure problem. In 2019, he co-founded Lean Technologies with Aditya Sarkar and Ashu Gupta to create a standardized connection between financial institutions and the businesses developing services around them.

Building the Connections Behind Financial Apps

Lean’s technology is based on application programming interfaces, or APIs. These tools allow two software systems to exchange information securely under defined rules.

In practice, Lean can help a regulated app verify a customer’s bank account, review financial information with the customer’s consent or facilitate an account-to-account payment. A lender, for example, could use verified transaction data to assess an applicant’s income and ability to repay. A merchant could allow a customer to pay directly from a bank account instead of entering card details.

Lean does not replace the bank, and it does not take ownership of a customer’s financial information. Its role is to provide the technical layer through which approved institutions connect, subject to consent and applicable regulation.

The distinction is important. Open banking promises more competition and easier movement of financial data, but it also creates responsibilities around privacy, cybersecurity and the clarity of customer authorization. A platform’s usefulness ultimately depends on whether consumers trust the organization requesting access and understand what information they are agreeing to share.

Moving Through the Regulatory Sandbox

Saudi Arabia introduced its Regulatory Sandbox to allow financial companies to test new products under SAMA’s supervision before receiving broader authorization.

Lean was among the early open banking infrastructure providers admitted to that controlled environment. During the sandbox period, the company connected more than 1 million bank accounts and analyzed more than 1 billion transactions.

That testing period gave Lean an operating record before the company entered the formally licensed market. It also reflected the measured approach Saudi regulators have taken toward open banking: permitting experimentation while developing rules around data access, consumer protection and operational security.

The March 2026 license authorized Lean to operate as an Account Information Service Provider under SAMA’s Major Payment Institution framework. In practical terms, it allowed the company to offer regulated open banking data services commercially rather than remaining within the limits of a test environment.

Attracting International Capital

Investor interest accompanied Lean’s regulatory progress.

The company raised $33 million in a Series A round in 2022. In November 2024, it secured another $67.5 million in a Series B led by General Catalyst, with participation from Bain Capital Ventures, Duquesne Family Office, Arbor Ventures and Jameel Investment Management Company. The transaction took Lean’s reported total funding above $100 million.

Lean said at the time that it had processed more than $2 billion in payment volume in the United Arab Emirates and verified nearly 1 million bank accounts in Saudi Arabia.

Expanding Across Saudi Arabia and the UAE

Lean’s development has taken place across the region’s two largest fintech centers.

In Saudi Arabia, the company provides open banking services under its SAMA license. Its UAE operations include an entity regulated by the Financial Services Regulatory Authority of Abu Dhabi Global Market, while another Lean entity has received in-principle approval from the Central Bank of the UAE for open finance services.

The company has worked with businesses across payments, consumer finance, insurance, investment, e-commerce and property. Its publicly named clients and partners have included Careem, e&, Tabby, Tamara, Tawuniya and Abdul Latif Jameel Finance.

Serving a broad group of financial companies also raises a strategic challenge. Lean must provide dependable infrastructure to businesses that may compete with one another while meeting different technical and regulatory requirements across jurisdictions.

Reliability is particularly important in financial infrastructure. A malfunction in a consumer app may inconvenience one group of users; a failure in the underlying connection layer can affect several businesses at once. That makes cybersecurity, system availability and regulatory compliance central to the company’s work rather than secondary technical concerns.

Leadership Away from the Consumer Spotlight

Al-Falih’s public profile differs from those of founders who built widely recognized consumer apps.

Lean’s name is generally not the one displayed when someone applies for financing, verifies an account or pays a merchant. The company operates in the background, which places less emphasis on consumer branding and more on relationships with banks, regulators and enterprise clients.

His leadership has consequently been shaped by patience as much as speed. Lean spent years developing integrations and operating within regulatory frameworks before open banking became a fully licensed activity in Saudi Arabia.

That approach does not remove the commercial pressures facing the company. Lean must translate regulatory access into sustainable revenue, maintain the confidence of financial institutions and demonstrate that open banking produces measurable benefits for businesses and customers.

Turning a License into Lasting Growth

Receiving Saudi Arabia’s first open banking license gave Lean an early position as the market opened to licensed providers. The company now has an opportunity to expand its infrastructure across financial services while supporting the regulatory framework governing consumer data and consent.

Open banking can reduce repetitive paperwork, improve account verification and give financial providers a clearer view of applicants with nontraditional income. As adoption expands, clear consent practices and effective data safeguards will remain important to maintaining consumer confidence.

Al-Falih’s next phase of leadership will therefore be measured by more than the number of accounts connected or transactions analyzed. Lean will need to balance expansion with security, commercial growth with regulatory obligations, and technological convenience with meaningful customer consent.

The infrastructure may remain mostly out of public view. Its influence on how people and businesses interact with financial services, however, is becoming increasingly difficult to overlook.