JUAN IDROVO

Grace Nelson Attorneys at Law, Cuenca, Ecuador (Remote)

• Designed, built and operate an AI paralegal for the firm's shared mailbox: each client email triggers a sandboxed Claude agent that updates the client file, files attachments, consults a cited knowledge base and drafts an unsigned reply in Outlook for attorney approval. Median 2.2 minutes from email to draft (November 2026); 2.8% failure rate across 1,379 runs.
• Implemented human-in-the-loop controls: the agent cannot send email, an attorney approves every draft, a daily email lists open questions and drafts awaiting review, and attorney edits feed weekly lessons learned. Structured records and matter status for about 220 clients and 920 matters.
• Lead the firm's information security: least-privilege Microsoft Graph permissions (send rights removed and verified), DKIM and DMARC, sandboxed agent runs that can change only one client's file, administrative access only over a private network, self-hosted Wazuh monitoring, versioned off-site backups and daily snapshots; write post-incident reviews and remediate root causes.
• Built the firm's immigration site, myecuadorvisa.com, from scratch in February 2026: from about 200 Google search impressions a month to 847,000 impressions and 9,270 clicks by November 2026. Also rebuilt the firm's main website in one day, with redirects for every legacy URL.

Markatzy, Trademark Protection Platform (markatzy.com)

• Designed, built and launched independently a trademark protection platform for the Ecuadorian intellectual property market, in production with a free tier. For a firm with 100 brands, it replaces more than 170,000 manual comparisons per month and narrows results to the conflicts that warrant attorney review.
• Translated trademark practice into product: similarity scoring on four dimensions (phonetic IPA in Spanish and English, typographic, semantic, visual); opposition letters drafted by Claude from a legal knowledge base, each citation linked to its source article in an audit trail; terms of service and a privacy policy under Ecuador's data protection law (LOPDP) with versioned, per-user acceptance.

Grace Nelson Attorneys at Law, Cuenca, Ecuador

• Managed immigration procedures for 100+ U.S. nationals per year with a 98%+ approval rate and coordinated 50+ real estate closings.
• Led the firm's digital transformation: first CRM, automated workflows, and a bilingual website with online payments and appointment booking.

Kriptos Inc., Miami, FL, USA (Remote)

• Developed the frontend of the Update Manager platform, used by enterprise clients including Latin American banks to deploy and monitor Windows security agents across thousands of endpoints: 37,000+ lines of production TypeScript and React as the main contributor to the core repository, including real-time agent status, automated deployment workflows and role-based access control (RBAC).
• Supported SOC 2 Type II certification by triaging findings from SonarCloud, Amazon Inspector and Hexstrike across 220+ repositories and coordinating remediation with development teams; implemented security fixes in the main frontend (authentication flows, dependency updates, input validation) without delaying feature delivery.

IMBAIP Cia. Ltda., Quito, Ecuador

• Managed registration, opposition and appeal proceedings for 200+ trademark applications before SENADI, Ecuador's national IP office, and drafted enforcement actions against infringers.
• Developed scripts comparing the ~1,700 publications in each monthly gazette against client portfolios to compensate for the firm's tooling; this work became Markatzy.

Tilburg University, Netherlands

Privacy and data protection law, cybersecurity law and the regulation of AI.

University of Texas at Austin, McCombs School of Business, USA

Executive education, certificate of completion; GPA 4.13/4.33. Network security, modern cyber attacks, security controls, governance, risk and compliance (GRC).

BrainStation (Konrad Group), London, United Kingdom

Winner of the Lloyds Banking Group partnership hackathon (fraud detection prototype) and of a scholarship for cybersecurity training.

Universidad San Francisco de Quito, Ecuador

Thesis on central bank digital currencies in dollarized economies. Coursework in intellectual property, technology law and international commercial law.

Python data pipeline with 20 collectors (SEC filings, memory prices, Taiwanese and Korean trade data, grid interconnection queues, earnings-call keywords) loading SQLite; weekly scoring of a written investment thesis, reviewed by a sandboxed Claude agent and delivered as an email report; backtest of trading rules against SMH and a fixed control portfolio; Datasette site on a private network; nightly backups to Amazon S3.