Stockholm-based Lovable announced on 12 August 2026 that it has raised $400 million in Series C funding at a $13.3 billion valuation, led by Menlo Ventures and co-led by the Scaleup Europe Fund managed by EQT. The round roughly doubles the $6.6 billion valuation the AI app-building platform reached in December 2025, eight months earlier.
The headline number is the valuation. The number that should interest anyone running a business in Riyadh, Dubai or Tunis is a different one: Lovable says apps built on its platform now receive more than 900 million visits every month, from over 60 million projects created since the product launched in November 2024.
That is a very large amount of production software written by people who are not software engineers.
Key Highlights
- $400 million Series C at a $13.3 billion post-money valuation, led by Menlo Ventures with the EQT-managed Scaleup Europe Fund as co-lead.
- Valuation doubled from $6.6 billion in December 2025 — roughly eight months.
- 60+ million projects created since the November 2024 launch; 900+ million monthly visits to apps built on the platform.
- Lovable reports a presence at roughly two-thirds of Fortune 500 companies.
- The company plans to grow to around 450 team members during 2026.
Who is in the round
The investor list is unusually geographically spread for a European company. Alongside Menlo Ventures and the Scaleup Europe Fund, the round drew Balderton Capital and Carmignac in Europe, Kaszek Ventures and LTS Growth in Latin America, Tencent and World Innovation Lab in Asia, and Regent in the United States. Returning backers include Accel, Antler, CapitalG, DST Global, Evantic Capital, HubSpot Ventures and Salesforce Ventures.
"Lovable was built for billions with creativity but blocked by technical ability," said Matt Murphy of Menlo Ventures. "That focus created growth, a beloved product, and an expanding market."
Victor Englesson of EQT framed it as a European milestone: "Anton, Fabian, and the team built one of the fastest-growing AI companies we've seen, proving Europe has exceptional founders."
Lovable says the capital goes to three things: extending the platform from building apps to running businesses, training its AI system on patterns of what actually succeeds rather than merely what compiles, and hiring in machine learning, product, infrastructure and security.
Why the security line item matters
That last word is not decorative. A week before the funding announcement, on 5 August, Lovable shipped a set of security features that tell you what the company sees coming: native Wiz security scanning surfaced inside every project, scheduled scan profiles, a partnership with Aikido for low-cost penetration testing, and a public trust centre page for every published app showing which controls are live. Lovable also says it is the first coding-agent platform to earn AIUC-1 certification.
Platforms do not build compliance infrastructure because customers ask politely. They build it because the output is reaching environments where someone will be held responsible for it.
What this means in the Gulf
Here is where the story stops being about a Swedish company's cap table.
The generation of apps arriving in Saudi and Emirati businesses through tools like Lovable is fast, genuinely useful, and frequently built by the person closest to the problem rather than by an engineering team. That is the upside, and it is real. The complication is that many of those apps collect names, phone numbers, national IDs and payment details — and they do it in a jurisdiction where the Personal Data Protection Law is no longer in a grace period.
SDAIA has issued dozens of PDPL enforcement decisions, with administrative fines reaching SAR 5 million and doubling for repeat violations. The law does not have a small-app exemption. A form built in an afternoon that stores customer data on infrastructure outside the Kingdom, with no transfer assessment and no named controller, carries the same legal exposure as a system built over six months by a vendor with a compliance department.
Most of the teams shipping these apps have no idea that is the position they are in, because nothing in the building experience tells them. We covered the mechanics of this in Your AI Stack Is a Cross-Border Transfer — the short version is that an API call to a foreign model is a data transfer under the PDPL, whatever it looks like in your editor.
The related failure mode is operational rather than legal. As we noted in The Vibe-Coding Security Gap, AI-generated applications tend to be strongest where the prompt was specific and weakest everywhere else: authentication edge cases, authorisation between tenants, rate limiting, and what happens when a dependency changes underneath. Those are the parts nobody thinks to ask for.
Background
Lovable launched in November 2024 and became one of the fastest-growing companies in the AI development-tools category, raising a $330 million Series B at a $6.6 billion valuation in December 2025 before this round. Reports in June and July 2026 had the company in talks at valuations between $12 billion and $13.2 billion; the closed round came in slightly above those figures.
The category around it has consolidated quickly, with Anthropic, OpenAI, Cursor, Figma and others all shipping some form of natural-language-to-application capability during 2026.
What's Next
Two things follow from a round this size, and they point in different directions.
The first is that the volume of software built without engineers is going to keep rising steeply. Lovable's stated plan is to move from building apps to running businesses, which means these tools will reach further into payroll, invoicing, customer records and other places where regulators pay attention.
The second is that the audit gap widens with it. The organisations that will do well out of this are the ones that let their teams build fast and then put a review layer between the prototype and production — checking where data physically goes, who can read it, and what the app does on a bad day rather than a good one.
Both can be true at once. The tool is not the problem; shipping its output straight to customers without anyone reading it is.
If your team is running apps built this way and nobody has checked what they do with personal data, that is a scoped, finishable piece of work rather than a crisis. Talk to us about an audit — we will tell you what we find, including if the answer is that you are fine.
Source: Lovable