CreatiCV – Technical Architecture and System Design Overview
CreatiCV is a multi-language career platform built on .NET 8. From its initial design phase, the system has followed a SaaS-oriented architectural approach. Its objective is not merely to provide a CV builder, but to establish a scalable and evolvable professional and recruitment technology platform.
This document outlines the current production architecture, core system modules, and future evolution strategy.
1. Infrastructure Layer
Production Environment
- Ubuntu Server
- Nginx (reverse proxy)
- MariaDB / MySQL
- HTTPS (Let’s Encrypt)
- Cloudflare security layer
- Single VPS hosting multiple projects
CreatiCV is deployed alongside other projects on a single VPS, with Nginx handling multi-domain reverse proxy configuration and isolation.
Architectural Characteristics
- Single-node deployment
- Stateless application design
- Centralized data management
- Designed for horizontal scalability
- Centralized operations and resource optimization
Planned Infrastructure Evolution
- Introduction of Redis caching (query/session caching)
- API separation (dedicated REST services)
- Frontend/backend separation
- Multi-instance deployment
- Enterprise API integration
The current structure anticipates API and mobile expansion.
2. Application Architecture
Technology Stack
- .NET 8
- ASP.NET Core Razor Pages
- Entity Framework Core
- Pomelo MySQL Provider
- Playwright (document rendering)
Layered architecture:
- Presentation Layer
- Service Layer
- Data Layer
- Infrastructure Layer (Payments / AI / Localization / Logging / Security)
This ensures:
- Separation of concerns
- Replaceable AI and payment integrations
- Independent evolution of the security layer
- Readiness for microservice-oriented expansion
3. Data Architecture
The database follows a normalized and modular design.
Core modules include:
- Users
- UserSubscriptions
- PayTransactions
- SystemLogs
- InviteCodes
- UserRewards
- JobListings
- InterviewSessions
- LocalizationResources
- CV / Cover Letter data models
- FwRules (Firewall Rules)
- FwRequestLog (Attack Logs)
- FwBlockedIps (Blocked IP Registry)
Data Design Principles
- Clear modular separation
- Logical enterprise data isolation
- Structured AI output storage
- Auditable security logging
- Designed for future analytics expansion
4. Document Rendering Engine
CreatiCV implements a custom A4 rendering engine.
Core components:
- FlowPager pagination engine
- Millimeter-based A4 precision (210mm × 297mm)
- Multi-template system
- RTL (Right-to-Left) support
- Playwright headless browser PDF export
This ensures:
- Identical browser preview and PDF output
- Full layout control
- No dependency on low-quality conversion libraries
5. Internationalization Architecture
The system natively supports 20+ languages, including RTL languages.
Implementation:
- .resx localization system
- Database-driven dynamic resources
- Template-level direction handling
- Cultural layout adaptation
The platform adapts not only text but also regional CV standards and cultural formatting differences.
6. Job Module Architecture
CreatiCV includes a structured job management system.
Features:
- Job publishing
- Category filtering
- Database persistence
- CV matching logic
- Expandable notification mechanisms
The data model supports enterprise publishing and future API integration.
7. AI Interview Architecture
The AI Interview system represents one of the platform’s core differentiators.
Individual Interview Workflow
- Interview session creation
- Position-specific question generation
- Candidate response (text or voice)
- AI evaluation
- Structured report generation
All outputs are stored in structured format for further analysis.
Enterprise Batch Interview System
Enterprises and recruitment agencies can deploy AI interviews at scale:
- Position-specific templates
- Bulk candidate invitations
- Concurrent interviews (hundreds of candidates)
- Automated structured reports
- Comparative scoring analysis
Technical characteristics:
- Independent session design
- Asynchronous processing
- Automated report generation
- Designed for concurrency optimization (caching or queue integration)
8. Enterprise & Recruitment Module (B2B)
Supports:
- Enterprise account system
- Candidate management
- Messaging system
- Custom quotation module
- Logical data isolation
Architecture supports multi-tenant separation and API integration.
9. Education Module
Includes:
- School application workflow
- Administrative approval
- Student eligibility binding
- Free-access permission control
- Time-bound subscription logic
10. Payment Architecture
- Mollie API integration
- Subscription and one-time payments
- Webhook verification
- Automatic subscription creation
- Structured logging
Designed for extensibility, including potential future crypto integration.
11. Incentive & Referral Architecture
Includes a structured incentive engine and referral tracking module.
This layer functions as a Growth-Oriented Business Logic Layer and collaborates with the subscription and payment systems.
12. Security Architecture
Beyond standard security measures, CreatiCV implements an application-level firewall.
Application-Level Firewall (ASP.NET Core Middleware)
- Detects malicious scanning paths (e.g., /.env, /wp-admin, /admin)
- Rule-based Log or Block decisions
- Supports Contains / StartsWith / EndsWith matching
- Score-based blocking mechanism
Attack Logging
When a rule is triggered:
- Request logged in FwRequestLog
- Stores IP, path, method, user agent
- Stores matched rule and action
- Stores score
- Stores GeoIP country
Only rule-triggered requests are logged.
IP Blocking Mechanism
Dual-layer blocking:
Redis-based temporary blocking
- Key: fw:block:{ip}
- TTL-based automatic expiration
Database-level blocking
- FwBlockedIps table
- Auditable
- Supports administrative unblocking
- Stores reason and country
Score Window Mechanism
- Redis key: fw:score:{ip}
- Score accumulation within configurable time window
- Blocking triggered when threshold exceeded
Configurable behavior:
- Immediate block on rule match
- Or cumulative blocking
Security Layering
Security operates at multiple layers:
- Network layer (Cloudflare)
- Reverse proxy layer (Nginx)
- Application layer firewall
- Data auditing layer
Security is prioritized alongside functionality.
13. Architectural Positioning
CreatiCV represents:
- A single-node SaaS architecture
- An evolvable modular platform
- AI-driven career technology infrastructure
- B2C + B2B + education support
- Application-level protection and auditing capability
Future direction:
- API separation
- Mobile expansion
- Enterprise SaaS segmentation
- Caching and concurrency optimization
- Multi-instance deployment
CreatiCV is not a simple CV builder, but a structured, extensible, and security-aware professional technology platform designed for long-term evolution.
Gallery