Mack Cloyd BacarisasContact me

I build full-stack products that solve real problems, and I make the AI part reliable.

Two years as a core backend engineer (part-time contract) on a HIPAA-regulated clinical platform. Full products shipped for a US non-profit, an AI startup and my own business.

252 endpoints · 17 servicesThe clinical platform I work on daily, with a team of ten
Hallucination guardrailsICD-10 and UMLS checks before a summary reaches a doctor
~5 deploys a weekOn the CI/CD and observability stack I built for that team
5 live productsBuilt end to end by me and running in production today

Selected work

Ayla AI · 2024 – now

Keeping hallucinations out of clinical summaries

Problem

VisitAssist turns patient visits into medical summaries. The summarizer was one 1,333-line class. Any change risked wrong output reaching a doctor.

What I built

A shared LLM pipeline across 139 files, proven with golden-fixture parity tests. An ICD-10 and UMLS validator that checks every summary.

Result

The rewrite shipped with no clinical regressions. The main file is 54% smaller, split into eight modules.

InputVisit transcript
PipelineShared LLM pipeline (my work)139 files · 8 modules
GuardICD-10 / UMLS validator (my work)+ field verifiers
OutputProvider summary
AuthzSpiceDB, per-org permissions (my work)
SecurityPHI encryption & redaction (my work)
OpsCI/CD, Grafana, VictoriaLogs (my work)
my work→ data flowFastAPI · 17 services · GCP

My product · 2026

PisoPhone: phones rented by the hour, locked by a server

Problem

Small shops in Cebu want to rent phones by the hour. The phone has to lock itself when paid time runs out.

What I built

A multi-tenant FastAPI server on a VPS I run. It grants and revokes sessions over WebSocket to a Kotlin agent on each phone.

Result

Live in its first shop, 2 of 5 phones connected so far. Operators run it from a Next.js dashboard.

PisoPhone home page: "Rent out phones. Keep every peso." next to a live device grid
app.pisophone.org · home
PisoPhone operator dashboard with two phone cards, each with Rent and Free unlock controls
Operator dashboard · shop name and device IDs blurred
ClientOperator dashboard (my work)Next.js
AuthoritySession server (my work)FastAPI · VPS · multi-tenant
Device · per phoneAndroid lock agent (my work)Kotlin · locked by default
ObserveGrafana · Loki · Prometheus, self-hosted
my work (all of it)→ data flow↔ two-way channel

Superbands · US non-profit · 2026

Personal stories from 21 cities, with consent built in

Problem

A mental-health non-profit collects photos, voice memos and locations from fans. That is sensitive data from vulnerable people.

What I built

Per-submission consent levels, a moderation queue, a deletion audit log and DSAR tooling, across two apps.

Result

Contributors from 21 cities in 6 countries. The Receipt runs at live tour dates.

StickWithMe home page: a laptop lid covered in stickers that link to each section
StickWithMe · home
The Receipt: a post-show keepsake card for a live concert
The Receipt · post-show keepsake
InputFan submissionphoto · voice · location
RuleConsent level (my work)
QueueModeration (my work)
OutputPublic map
AuditDeletion audit log (my work)
PrivacyDSAR export tooling (my work)
AnalyticsCurator dashboard (my work)
my work→ data flowNext.js · Supabase · Postgres

Experience

09/2024 – now

Backend Software Engineer · Ayla AI

Part-time contract

VisitAssist: moved authorization to SpiceDB across 70 files. Owned PHI encryption and HIPAA reporting. Built the CI/CD the team ships on.

ContractMani (contract intelligence): built a human-adjudicated benchmark to pick the extraction model. Streamed PDFs through batch extraction to cut peak memory. Added per-call LLM cost tracking and hardened the job workers.

11/2025 – 09/2026

Freelance Full-stack Engineer

Freelance, alongside Ayla

Superbands: two apps (above). Syndr AI: Subreddit Finder and AI Campaign Assistant, most of the backlog. LandTrax: lead developer and PM on the E-Lodgement Portal, not yet released.

04 – 11/2024

AI Engineer · FindaHost.io

Contract

Revenue calculator, with a model trained on tens of thousands of listings.

01 – 04/2024

Full Stack Engineer · Web2

Ride-hailing app for a California rent-a-car company. Ionic, Vue.

09/2021 – 12/2023

L1 IT Service Desk · Numotion

Supported internal teams by phone with printer, network and computer problems. Closed 50+ tickets a day.

BS Information Technology, Asian College of Technology, 2019 – 2024

Side projects

Earlier: Rasta Bot, a GPT-3.5 Messenger bot (2024) · POSheesh, a coffee shop POS (2024) · HexaPawn, my first AI program (2020)

Let's clear things up

Are you frontend or backend?

Both. I go deepest on the backend: APIs, auth, LLM pipelines and CI/CD. I build the Next.js or React front end on top.

Have you handled sensitive data?

Yes. On a HIPAA-regulated platform I own PHI protection: encryption, redaction and access control. For a US non-profit I built consent levels, a deletion audit log and data subject access request tooling.

What hours do you work?

8 PM to 4 AM Philippine time. That covers the US Eastern workday, so your standups are my standups.

Are you still at Ayla AI?

Yes, on a part-time contract. My freelance work ran alongside it. I am looking for one full-time role and can start right away.

How soon can you start?

Right away.