ATS-CVC
Overview
A CV gap analysis tool that compares your CV against a job description using the ATS-CVC Framework — highlighting what's missing, undersold, and what a hiring manager will probe on.
ATS-CVC is not a CV writer. It's an analytical tool that identifies gaps, framing mismatches, and interview risks between a specific CV and a specific job description. The framework, backed by evidence and research, is the product — AI is the analytical engine.
Live Tool
The tool runs entirely in your browser. No server, no database, no tracking. Bring your own API key from any of the four supported providers.
The Framework
The ATS-CVC Framework produces five structured outputs from any CV + JD pair:
| Role Fit | Percentage score with detailed breakdown of alignment |
| Seniority Calibration | Whether the CV reads at the right level for the role |
| Keyword Gap | Present, missing, and framing mismatches |
| Expand These Points | Specific CV sections underselling their value |
| Interview Risk Flags | What hiring managers are likely to probe on |
Four Guardrails
The framework operates under four non-negotiable constraints to prevent CV fraud:
- No invented quantification — never suggest metrics not evidenced in the CV
- No verb upgrades beyond accuracy — don't overclaim ownership versus contribution
- No unevidenced skill assumptions — don't add skills not actually in the CV
- Flag every assumption explicitly — make visible every inference that needs verification
These exist because the tool is supposed to make candidates more competitive honestly, not help them misrepresent themselves. A candidate following the tool's advice should still be able to defend every claim on their CV in an interview.
AI Provider Support
Bring your own API key from any of:
- Anthropic Claude
- OpenAI GPT
- Google Gemini
- Mistral (includes free tier)
API keys are never stored. They live only in memory during the session and are explicitly cleared on page close. No keys are logged, persisted, or transmitted anywhere except to the chosen provider's API.
Architecture
The tool is a single HTML file (~60KB) with no build step, no bundler, no server, and no dependencies to install. This is deliberate.
| Architecture | Single-file HTML/CSS/JavaScript |
| PDF parsing | PDF.js v3.11.174 (browser-side) |
| Hosting | GitHub Pages (static only) |
| State | No localStorage, no cookies, no backend |
| CSP | Connections restricted to 4 AI provider domains |
The single-file design is intentional: the entire tool is auditable in one view. You can open it, read it, understand what it does, and verify the security claims yourself.
Security Model
CV/JD upload → browser text extraction → prompt injection sanitisation ↓ HTTPS to chosen provider ↓ Response rendered in browser ↓ Explicit cleanup on page close
What leaves your machine: Only the CV text, JD text, and your API key, sent directly to the provider you chose. Nothing else.
What's on disk: Nothing. No cookies, no localStorage, no logs, no database.
Input validation: Magic number checks, extension validation, size limits (CV 5MB, JD 2MB), text truncation for cost control (CV 8,000 chars, JD 4,000 chars).
Prompt injection protection: Text sanitisation patterns to prevent the uploaded CV/JD from manipulating the prompt.
Usage
- Go to the live tool
- Choose an AI provider (Mistral has a free tier)
- Get an API key from your chosen provider — links provided in the UI
- Upload your CV (PDF, max 5MB)
- Upload or paste the job description
- Confirm the extracted name and role title
- Click Analyze to run
- Review the five-part report
- Save as PDF using the browser print function
Evidence Base
The framework is backed by primary research sources. It explicitly debunks common CV myths — for example, the widely-repeated "75% ATS auto-rejection" statistic, which turns out to be fabricated and not traceable to any published study.
The methodology documentation (METHODOLOGY.md in the repo) includes:
- ATS reality check and recruiter screening research
- Eight-stage manual CV tailoring process
- Five analytical output specifications
- ATS-safe CV format specification
- Full evidence base with primary sources and URLs
Local Development
The tool has no build step. Run with any static file server:
# Python
python3 -m http.server 8080
# Node
npx serve .
Then open http://localhost:8080/tool/. File:// URLs work for most functionality, but some browsers restrict API calls from file:// origins due to CORS policy.
Documentation
The repo includes extensive documentation beyond the code:
| METHODOLOGY.md | Framework documentation with evidence base |
| FRAMEWORK_PROMPT.md | Machine-readable system prompt for AI providers |
| BUILD.md | Technical decisions and their rationale |
| SECURITY.md | Security architecture and guarantees |
| PRIVACY.md | Privacy commitments and data flow |