diff --git a/app/components/ApplyCandidateModal.vue b/app/components/ApplyCandidateModal.vue
index 9fc9b78b..5aa9bded 100644
--- a/app/components/ApplyCandidateModal.vue
+++ b/app/components/ApplyCandidateModal.vue
@@ -1,5 +1,6 @@
 <script setup lang="ts">
-import { Search, X, UserPlus } from 'lucide-vue-next'
+import { Search, X, UserPlus, FileText, Loader2, UploadCloud } from 'lucide-vue-next'
+import { z } from 'zod'
 import { usePreviewReadOnly } from '~/composables/usePreviewReadOnly'
 
 const props = withDefaults(defineProps<{
@@ -14,7 +15,21 @@ const emit = defineEmits<{
   (e: 'created'): void
 }>()
 
-// Search for candidates
+const { handlePreviewReadOnlyError } = usePreviewReadOnly()
+const { formatCandidateName } = useOrgSettings()
+const { uploadDocument } = useDocuments()
+const { track } = useTrack()
+const toast = useToast()
+
+// Someone who isn't in the pool yet used to mean leaving the job, creating the
+// candidate, coming back and searching for them. Both paths live here instead,
+// and either one ends with the candidate on this job.
+const mode = ref<'search' | 'new'>('search')
+
+// ─────────────────────────────────────────────
+// Search existing candidates
+// ─────────────────────────────────────────────
+
 const searchInput = ref('')
 const debouncedSearch = ref<string | undefined>(undefined)
 
@@ -26,7 +41,7 @@ watch(searchInput, (val) => {
   }, 300)
 })
 
-const { data: candidateData, status: searchStatus } = useFetch('/api/candidates', {
+const { data: candidateData, status: searchStatus, refresh: refreshSearch } = useFetch('/api/candidates', {
   key: 'apply-candidate-search',
   query: computed(() => ({
     ...(debouncedSearch.value && { search: debouncedSearch.value }),
@@ -36,10 +51,24 @@ const { data: candidateData, status: searchStatus } = useFetch('/api/candidates'
 })
 
 const candidates = computed(() => candidateData.value?.data ?? [])
-const { handlePreviewReadOnlyError } = usePreviewReadOnly()
-const { formatCandidateName } = useOrgSettings()
 
-// Apply candidate
+// An empty pool has nothing to search — open straight on the form instead.
+const hasChosenMode = ref(false)
+watch([searchStatus, candidateData], () => {
+  if (hasChosenMode.value || searchStatus.value !== 'success') return
+  hasChosenMode.value = true
+  if (!debouncedSearch.value && candidates.value.length === 0) mode.value = 'new'
+}, { immediate: true })
+
+function switchMode(next: 'search' | 'new') {
+  hasChosenMode.value = true
+  mode.value = next
+}
+
+// ─────────────────────────────────────────────
+// Apply
+// ─────────────────────────────────────────────
+
 const isApplying = ref(false)
 const applyError = ref('')
 
@@ -59,13 +88,219 @@ async function applyCandidate(candidateId: string) {
     isApplying.value = false
   }
 }
+
+// ─────────────────────────────────────────────
+// New candidate
+// ─────────────────────────────────────────────
+
+const form = ref({
+  firstName: '',
+  lastName: '',
+  email: '',
+  phone: '',
+})
+
+const errors = ref<Record<string, string>>({})
+const createError = ref<string | null>(null)
+const duplicateEmail = ref<string | null>(null)
+const isCreating = ref(false)
+
+// Fill from CV — same deal as the standalone add-candidate page: the file is
+// held client-side and only attached once the candidate record exists, so a bad
+// extraction leaves no candidate and no orphaned upload behind.
+
+const CV_MIME_TYPES = [
+  'application/pdf',
+  'application/msword',
+  'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+]
+const CV_MAX_BYTES = 10 * 1024 * 1024
+
+const cvFile = ref<File | null>(null)
+const isExtracting = ref(false)
+const cvError = ref<string | null>(null)
+const isDraggingCv = ref(false)
+const filledFields = ref<string[]>([])
+
+/** `.doc` files report an empty or generic MIME type in some browsers. */
+function looksLikeCv(file: File) {
+  return CV_MIME_TYPES.includes(file.type) || /\.(pdf|docx?)$/i.test(file.name)
+}
+
+async function handleCvFile(file: File | null | undefined) {
+  if (!file) return
+
+  cvError.value = null
+  filledFields.value = []
+
+  if (!looksLikeCv(file)) {
+    cvError.value = 'That file type isn\'t supported. Use a PDF, DOC, or DOCX.'
+    return
+  }
+  if (file.size > CV_MAX_BYTES) {
+    cvError.value = `That file is too large. Maximum size is ${CV_MAX_BYTES / 1024 / 1024} MB.`
+    return
+  }
+
+  isExtracting.value = true
+  try {
+    const formData = new FormData()
+    formData.append('file', file)
+
+    const extracted = await $fetch<{
+      firstName: string | null
+      lastName: string | null
+      email: string | null
+      phone: string | null
+    }>('/api/candidates/extract-cv', { method: 'POST', body: formData })
+
+    // Only overwrite fields the CV actually answered — anything already typed
+    // stays put when the document is silent on it.
+    const filled: string[] = []
+    for (const field of ['firstName', 'lastName', 'email', 'phone'] as const) {
+      const value = extracted[field]?.trim()
+      if (value) {
+        form.value[field] = value
+        filled.push(field)
+      }
+    }
+
+    cvFile.value = file
+    filledFields.value = filled
+    errors.value = {}
+    track('candidate_cv_extracted', { fields_filled: filled.length, source: 'job_pipeline' })
+
+    if (filled.length === 0) {
+      cvError.value = 'Couldn\'t find contact details in that file. Fill the form in below — the CV will still be attached.'
+    }
+  } catch (err: any) {
+    cvError.value = err.data?.statusMessage ?? 'Couldn\'t read that file. Fill the form in manually instead.'
+  } finally {
+    isExtracting.value = false
+  }
+}
+
+function onCvDrop(event: DragEvent) {
+  isDraggingCv.value = false
+  handleCvFile(event.dataTransfer?.files?.[0])
+}
+
+function onCvSelected(event: Event) {
+  const input = event.target as HTMLInputElement
+  handleCvFile(input.files?.[0])
+  // Reset so re-picking the same file fires `change` again.
+  input.value = ''
+}
+
+function clearCv() {
+  cvFile.value = null
+  cvError.value = null
+  filledFields.value = []
+}
+
+// ─────────────────────────────────────────────
+// New candidate — create and apply
+// ─────────────────────────────────────────────
+
+const formSchema = z.object({
+  firstName: z.string().min(1, 'First name is required').max(100),
+  lastName: z.string().min(1, 'Last name is required').max(100),
+  email: z.string().min(1, 'Email is required').email('Invalid email address').max(255),
+  phone: z.string().max(50).optional(),
+})
+
+function validate(): boolean {
+  const result = formSchema.safeParse({
+    ...form.value,
+    phone: form.value.phone || undefined,
+  })
+  if (!result.success) {
+    errors.value = {}
+    for (const issue of result.error.issues) {
+      const field = issue.path[0]?.toString()
+      if (field) errors.value[field] = issue.message
+    }
+    return false
+  }
+  errors.value = {}
+  return true
+}
+
+/** Take the duplicate email over to the search tab so they can be applied. */
+function findDuplicate() {
+  if (!duplicateEmail.value) return
+  searchInput.value = duplicateEmail.value
+  duplicateEmail.value = null
+  switchMode('search')
+}
+
+async function createAndApply() {
+  createError.value = null
+  duplicateEmail.value = null
+  if (!validate()) return
+
+  isCreating.value = true
+  try {
+    const created = await $fetch('/api/candidates', {
+      method: 'POST',
+      body: {
+        firstName: form.value.firstName,
+        lastName: form.value.lastName,
+        email: form.value.email,
+        phone: form.value.phone || undefined,
+      },
+    })
+    track('candidate_added', { from_cv: !!cvFile.value, source: 'job_pipeline' })
+
+    // The candidate exists from here on. Neither a failed upload nor a failed
+    // application should read as "nothing happened" — say what went wrong and
+    // leave the record in place.
+    if (cvFile.value) {
+      try {
+        await uploadDocument(created.id, cvFile.value, 'resume')
+      } catch {
+        toast.error('Candidate created, but the CV could not be attached', {
+          message: 'Open the candidate and upload it again.',
+        })
+      }
+    }
+
+    try {
+      await $fetch('/api/applications', {
+        method: 'POST',
+        body: { candidateId: created.id, jobId: props.jobId },
+      })
+    } catch (err: any) {
+      // The candidate is in the pool either way — say so, and leave the search
+      // tab as the way to finish the job.
+      createError.value = `${created.firstName} ${created.lastName} was created, but adding them to this job failed: ${err.data?.statusMessage ?? 'unknown error'}. Find them under "From your pool" and try again.`
+      await refreshSearch()
+      return
+    }
+
+    await refreshNuxtData('candidates')
+    emit('created')
+  } catch (err: any) {
+    if (handlePreviewReadOnlyError(err)) return
+    const message = err.data?.statusMessage ?? 'Something went wrong'
+    const statusCode = err.statusCode ?? err.data?.statusCode
+    if (statusCode === 409 && message.includes('email')) {
+      errors.value.email = message
+      duplicateEmail.value = form.value.email
+    } else {
+      createError.value = message
+    }
+  } finally {
+    isCreating.value = false
+  }
+}
 </script>
 
 <template>
   <Teleport :to="teleportTarget">
     <div class="fixed inset-0 z-50 flex items-center justify-center">
       <div class="absolute inset-0 bg-black/50" @click="emit('close')" />
-      <div class="relative bg-white dark:bg-surface-900 rounded-xl shadow-xl w-full max-w-md mx-4 max-h-[80vh] flex flex-col">
+      <div class="relative bg-white dark:bg-surface-900 rounded-xl shadow-xl w-full max-w-md mx-4 max-h-[85vh] flex flex-col">
         <!-- Header -->
         <div class="flex items-center justify-between px-5 py-4 border-b border-surface-200 dark:border-surface-800">
           <div class="flex items-center gap-2">
@@ -80,54 +315,239 @@ async function applyCandidate(candidateId: string) {
           </button>
         </div>
 
-        <!-- Search -->
-        <div class="px-5 pt-4">
-          <div class="relative">
-            <Search class="absolute left-3 top-1/2 -translate-y-1/2 size-4 text-surface-400" />
-            <input
-              v-model="searchInput"
-              type="text"
-              placeholder="Search candidates by name or email…"
-              class="w-full rounded-lg border border-surface-200 dark:border-surface-700 bg-white dark:bg-surface-800 pl-10 pr-3 py-2 text-sm text-surface-900 dark:text-surface-100 placeholder:text-surface-400 focus:outline-none focus:ring-2 focus:ring-brand-500 focus:border-brand-500 transition-colors"
-            />
-          </div>
+        <!-- Mode tabs -->
+        <div class="flex gap-1 px-5 pt-4">
+          <button
+            v-for="tab in [{ id: 'search', label: 'From your pool' }, { id: 'new', label: 'New candidate' }]"
+            :key="tab.id"
+            class="cursor-pointer rounded-lg px-3 py-1.5 text-sm font-medium transition-colors"
+            :class="mode === tab.id
+              ? 'bg-brand-50 text-brand-700 dark:bg-brand-950/60 dark:text-brand-300'
+              : 'text-surface-500 hover:bg-surface-50 hover:text-surface-700 dark:text-surface-400 dark:hover:bg-surface-800 dark:hover:text-surface-200'"
+            @click="switchMode(tab.id as 'search' | 'new')"
+          >
+            {{ tab.label }}
+          </button>
         </div>
 
-        <!-- Error -->
-        <div v-if="applyError" class="mx-5 mt-3 rounded-lg border border-danger-200 bg-danger-50 dark:bg-danger-950 p-3 text-sm text-danger-700 dark:text-danger-400">
-          {{ applyError }}
-        </div>
+        <!-- ── From your pool ── -->
+        <template v-if="mode === 'search'">
+          <!-- Search -->
+          <div class="px-5 pt-3">
+            <div class="relative">
+              <Search class="absolute left-3 top-1/2 -translate-y-1/2 size-4 text-surface-400" />
+              <input
+                v-model="searchInput"
+                type="text"
+                placeholder="Search candidates by name or email…"
+                class="w-full rounded-lg border border-surface-200 dark:border-surface-700 bg-white dark:bg-surface-800 pl-10 pr-3 py-2 text-sm text-surface-900 dark:text-surface-100 placeholder:text-surface-400 focus:outline-none focus:ring-2 focus:ring-brand-500 focus:border-brand-500 transition-colors"
+              />
+            </div>
+          </div>
 
-        <!-- Candidate list -->
-        <div class="flex-1 overflow-y-auto px-5 py-3">
-          <div v-if="searchStatus === 'pending'" class="text-center py-6 text-surface-400 text-sm">
-            Searching…
+          <!-- Error -->
+          <div v-if="applyError" class="mx-5 mt-3 rounded-lg border border-danger-200 bg-danger-50 dark:bg-danger-950 p-3 text-sm text-danger-700 dark:text-danger-400">
+            {{ applyError }}
           </div>
 
-          <div v-else-if="candidates.length === 0" class="text-center py-6 text-surface-400 text-sm">
-            {{ debouncedSearch ? 'No candidates found.' : 'No candidates in your org yet.' }}
+          <!-- Candidate list -->
+          <div class="flex-1 overflow-y-auto px-5 py-3">
+            <div v-if="searchStatus === 'pending'" class="text-center py-6 text-surface-400 text-sm">
+              Searching…
+            </div>
+
+            <div v-else-if="candidates.length === 0" class="py-6 text-center">
+              <p class="text-sm text-surface-400">
+                {{ debouncedSearch ? 'No candidates found.' : 'No candidates in your org yet.' }}
+              </p>
+              <button
+                class="mt-2 cursor-pointer text-sm font-medium text-brand-600 hover:underline dark:text-brand-400"
+                @click="switchMode('new')"
+              >
+                Add a new candidate instead
+              </button>
+            </div>
+
+            <div v-else class="space-y-1">
+              <button
+                v-for="c in candidates"
+                :key="c.id"
+                :disabled="isApplying"
+                class="w-full flex items-center justify-between rounded-lg px-3 py-2.5 text-left hover:bg-surface-50 dark:hover:bg-surface-800 transition-colors disabled:opacity-50"
+                @click="applyCandidate(c.id)"
+              >
+                <div class="min-w-0">
+                  <p class="text-sm font-medium text-surface-900 dark:text-surface-100 truncate">
+                    {{ formatCandidateName(c) }}
+                  </p>
+                  <p class="text-xs text-surface-400 truncate">{{ c.email }}</p>
+                </div>
+                <span class="text-xs text-brand-600 dark:text-brand-400 font-medium shrink-0 ml-2">
+                  Apply
+                </span>
+              </button>
+            </div>
           </div>
+        </template>
 
-          <div v-else class="space-y-1">
-            <button
-              v-for="c in candidates"
-              :key="c.id"
-              :disabled="isApplying"
-              class="w-full flex items-center justify-between rounded-lg px-3 py-2.5 text-left hover:bg-surface-50 dark:hover:bg-surface-800 transition-colors disabled:opacity-50"
-              @click="applyCandidate(c.id)"
+        <!-- ── New candidate ── -->
+        <template v-else>
+          <div class="flex-1 overflow-y-auto px-5 py-3">
+            <!-- Server error -->
+            <div
+              v-if="createError"
+              class="mb-4 rounded-lg border border-danger-200 dark:border-danger-800 bg-danger-50 dark:bg-danger-950 p-3 text-sm text-danger-700 dark:text-danger-400"
+            >
+              {{ createError }}
+            </div>
+
+            <!-- Fill from CV -->
+            <div
+              class="rounded-xl border border-dashed px-4 py-5 text-center transition-colors"
+              :class="isDraggingCv
+                ? 'border-brand-400 bg-brand-50/60 dark:border-brand-600 dark:bg-brand-950/30'
+                : 'border-surface-300 bg-surface-50/60 dark:border-surface-700 dark:bg-surface-900/40'"
+              @dragover.prevent="isDraggingCv = true"
+              @dragleave.prevent="isDraggingCv = false"
+              @drop.prevent="onCvDrop"
             >
-              <div class="min-w-0">
-                <p class="text-sm font-medium text-surface-900 dark:text-surface-100 truncate">
-                  {{ formatCandidateName(c) }}
+              <!-- Extracting -->
+              <div v-if="isExtracting" class="flex items-center justify-center gap-2 text-sm text-surface-600 dark:text-surface-300">
+                <Loader2 class="size-4 animate-spin" />
+                Reading the CV…
+              </div>
+
+              <!-- Attached -->
+              <div v-else-if="cvFile" class="flex items-center justify-center gap-3">
+                <FileText class="size-4 shrink-0 text-brand-600 dark:text-brand-400" />
+                <div class="min-w-0 text-left">
+                  <p class="truncate text-sm font-medium text-surface-800 dark:text-surface-200">{{ cvFile.name }}</p>
+                  <p class="text-xs text-surface-500 dark:text-surface-400">
+                    {{ filledFields.length > 0
+                      ? `Filled ${filledFields.length} field${filledFields.length === 1 ? '' : 's'} — check them below.`
+                      : 'Will be attached as their résumé.' }}
+                  </p>
+                </div>
+                <button
+                  type="button"
+                  class="ml-1 grid size-7 shrink-0 cursor-pointer place-items-center rounded-lg text-surface-400 hover:bg-surface-100 hover:text-surface-700 dark:hover:bg-surface-800 dark:hover:text-surface-200"
+                  aria-label="Remove CV"
+                  @click="clearCv"
+                >
+                  <X class="size-4" />
+                </button>
+              </div>
+
+              <!-- Empty -->
+              <div v-else>
+                <UploadCloud class="mx-auto size-5 text-surface-400 dark:text-surface-500" />
+                <p class="mt-2 text-sm font-medium text-surface-700 dark:text-surface-300">
+                  Drop a CV to fill this in
+                </p>
+                <p class="mt-1 text-xs text-surface-500 dark:text-surface-400">
+                  PDF, DOC, or DOCX — including a LinkedIn profile saved as PDF.
                 </p>
-                <p class="text-xs text-surface-400 truncate">{{ c.email }}</p>
+                <label class="mt-3 inline-flex cursor-pointer items-center rounded-lg border border-surface-300 bg-white px-3 py-1.5 text-xs font-medium text-surface-700 transition-colors hover:bg-surface-50 dark:border-surface-700 dark:bg-surface-900 dark:text-surface-300 dark:hover:bg-surface-800">
+                  Choose a file
+                  <input type="file" accept=".pdf,.doc,.docx" class="sr-only" @change="onCvSelected" />
+                </label>
+              </div>
+            </div>
+
+            <p v-if="cvError" class="mt-2 text-xs text-warning-700 dark:text-warning-400">{{ cvError }}</p>
+
+            <form id="new-candidate-form" class="mt-4 space-y-4" @submit.prevent="createAndApply">
+              <!-- Name -->
+              <div class="grid grid-cols-2 gap-3">
+                <div>
+                  <label for="apply-firstName" class="block text-sm font-medium text-surface-700 dark:text-surface-300 mb-1">
+                    First Name <span class="text-danger-500">*</span>
+                  </label>
+                  <input
+                    id="apply-firstName"
+                    v-model="form.firstName"
+                    type="text"
+                    placeholder="e.g. Jane"
+                    class="w-full rounded-lg border px-3 py-2 text-sm text-surface-900 dark:text-surface-100 bg-white dark:bg-surface-900 placeholder:text-surface-400 focus:outline-none focus:ring-2 focus:ring-brand-500 focus:border-brand-500 transition-colors"
+                    :class="errors.firstName ? 'border-danger-300' : 'border-surface-300 dark:border-surface-700'"
+                  />
+                  <p v-if="errors.firstName" class="mt-1 text-xs text-danger-600 dark:text-danger-400">{{ errors.firstName }}</p>
+                </div>
+                <div>
+                  <label for="apply-lastName" class="block text-sm font-medium text-surface-700 dark:text-surface-300 mb-1">
+                    Last Name <span class="text-danger-500">*</span>
+                  </label>
+                  <input
+                    id="apply-lastName"
+                    v-model="form.lastName"
+                    type="text"
+                    placeholder="e.g. Doe"
+                    class="w-full rounded-lg border px-3 py-2 text-sm text-surface-900 dark:text-surface-100 bg-white dark:bg-surface-900 placeholder:text-surface-400 focus:outline-none focus:ring-2 focus:ring-brand-500 focus:border-brand-500 transition-colors"
+                    :class="errors.lastName ? 'border-danger-300' : 'border-surface-300 dark:border-surface-700'"
+                  />
+                  <p v-if="errors.lastName" class="mt-1 text-xs text-danger-600 dark:text-danger-400">{{ errors.lastName }}</p>
+                </div>
               </div>
-              <span class="text-xs text-brand-600 dark:text-brand-400 font-medium shrink-0 ml-2">
-                Apply
-              </span>
+
+              <!-- Email -->
+              <div>
+                <label for="apply-email" class="block text-sm font-medium text-surface-700 dark:text-surface-300 mb-1">
+                  Email <span class="text-danger-500">*</span>
+                </label>
+                <input
+                  id="apply-email"
+                  v-model="form.email"
+                  type="email"
+                  placeholder="e.g. jane.doe@example.com"
+                  class="w-full rounded-lg border px-3 py-2 text-sm text-surface-900 dark:text-surface-100 bg-white dark:bg-surface-900 placeholder:text-surface-400 focus:outline-none focus:ring-2 focus:ring-brand-500 focus:border-brand-500 transition-colors"
+                  :class="errors.email ? 'border-danger-300' : 'border-surface-300 dark:border-surface-700'"
+                />
+                <p v-if="errors.email" class="mt-1 text-xs text-danger-600 dark:text-danger-400">{{ errors.email }}</p>
+                <button
+                  v-if="duplicateEmail"
+                  type="button"
+                  class="mt-1 cursor-pointer text-xs font-medium text-brand-600 hover:underline dark:text-brand-400"
+                  @click="findDuplicate"
+                >
+                  Find them in your pool and apply them instead
+                </button>
+              </div>
+
+              <!-- Phone -->
+              <div>
+                <label for="apply-phone" class="block text-sm font-medium text-surface-700 dark:text-surface-300 mb-1">
+                  Phone
+                </label>
+                <input
+                  id="apply-phone"
+                  v-model="form.phone"
+                  type="tel"
+                  placeholder="e.g. +1 (555) 123-4567"
+                  class="w-full rounded-lg border border-surface-300 dark:border-surface-700 px-3 py-2 text-sm text-surface-900 dark:text-surface-100 bg-white dark:bg-surface-900 placeholder:text-surface-400 focus:outline-none focus:ring-2 focus:ring-brand-500 focus:border-brand-500 transition-colors"
+                />
+              </div>
+            </form>
+          </div>
+
+          <!-- Actions -->
+          <div class="flex items-center justify-end gap-2 border-t border-surface-200 dark:border-surface-800 px-5 py-3">
+            <button
+              type="button"
+              class="cursor-pointer rounded-lg border border-surface-300 dark:border-surface-700 px-3 py-1.5 text-sm font-medium text-surface-700 dark:text-surface-300 hover:bg-surface-50 dark:hover:bg-surface-800 transition-colors"
+              @click="emit('close')"
+            >
+              Cancel
+            </button>
+            <button
+              type="submit"
+              form="new-candidate-form"
+              :disabled="isCreating || isExtracting"
+              class="inline-flex cursor-pointer items-center rounded-lg bg-brand-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-brand-700 disabled:opacity-50 disabled:cursor-not-allowed transition-colors"
+            >
+              {{ isCreating ? 'Adding…' : 'Add to this job' }}
             </button>
           </div>
-        </div>
+        </template>
       </div>
     </div>
   </Teleport>
diff --git a/app/pages/dashboard/candidates/new.vue b/app/pages/dashboard/candidates/new.vue
index d214fbae..bffd7528 100644
--- a/app/pages/dashboard/candidates/new.vue
+++ b/app/pages/dashboard/candidates/new.vue
@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import { ArrowLeft } from 'lucide-vue-next'
+import { ArrowLeft, FileText, Loader2, UploadCloud, X } from 'lucide-vue-next'
 import { z } from 'zod'
 
 definePageMeta({
@@ -14,7 +14,9 @@ useSeoMeta({
 
 const localePath = useLocalePath()
 const { createCandidate } = useCandidates()
+const { uploadDocument } = useDocuments()
 const { track } = useTrack()
+const toast = useToast()
 
 // Form state
 const form = ref({
@@ -31,6 +33,103 @@ const isSubmitting = ref(false)
 const errors = ref<Record<string, string>>({})
 const submitError = ref<string | null>(null)
 
+// ─────────────────────────────────────────────
+// Fill from CV
+// ─────────────────────────────────────────────
+// Drop a CV and the form is filled from it. The file is held client-side and
+// attached to the candidate as their résumé once the record exists — so a bad
+// extraction leaves nothing behind, and the recruiter always confirms before
+// anything is written. Works with LinkedIn's own "Save to PDF" profile export.
+
+const CV_MIME_TYPES = [
+  'application/pdf',
+  'application/msword',
+  'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+]
+const CV_MAX_BYTES = 10 * 1024 * 1024
+
+const cvFile = ref<File | null>(null)
+const isExtracting = ref(false)
+const cvError = ref<string | null>(null)
+const isDraggingCv = ref(false)
+const filledFields = ref<string[]>([])
+
+/** `.doc` files report an empty or generic MIME type in some browsers. */
+function looksLikeCv(file: File) {
+  return CV_MIME_TYPES.includes(file.type) || /\.(pdf|docx?)$/i.test(file.name)
+}
+
+async function handleCvFile(file: File | null | undefined) {
+  if (!file) return
+
+  cvError.value = null
+  filledFields.value = []
+
+  if (!looksLikeCv(file)) {
+    cvError.value = 'That file type isn\'t supported. Use a PDF, DOC, or DOCX.'
+    return
+  }
+  if (file.size > CV_MAX_BYTES) {
+    cvError.value = `That file is too large. Maximum size is ${CV_MAX_BYTES / 1024 / 1024} MB.`
+    return
+  }
+
+  isExtracting.value = true
+  try {
+    const formData = new FormData()
+    formData.append('file', file)
+
+    const extracted = await $fetch<{
+      firstName: string | null
+      lastName: string | null
+      email: string | null
+      phone: string | null
+    }>('/api/candidates/extract-cv', { method: 'POST', body: formData })
+
+    // Only overwrite fields the CV actually answered — anything already typed
+    // stays put when the document is silent on it.
+    const filled: string[] = []
+    for (const field of ['firstName', 'lastName', 'email', 'phone'] as const) {
+      const value = extracted[field]?.trim()
+      if (value) {
+        form.value[field] = value
+        filled.push(field)
+      }
+    }
+
+    cvFile.value = file
+    filledFields.value = filled
+    errors.value = {}
+    track('candidate_cv_extracted', { fields_filled: filled.length })
+
+    if (filled.length === 0) {
+      cvError.value = 'Couldn\'t find contact details in that file. Fill the form in below — the CV will still be attached.'
+    }
+  } catch (err: any) {
+    cvError.value = err.data?.statusMessage ?? 'Couldn\'t read that file. Fill the form in manually instead.'
+  } finally {
+    isExtracting.value = false
+  }
+}
+
+function onCvDrop(event: DragEvent) {
+  isDraggingCv.value = false
+  handleCvFile(event.dataTransfer?.files?.[0])
+}
+
+function onCvSelected(event: Event) {
+  const input = event.target as HTMLInputElement
+  handleCvFile(input.files?.[0])
+  // Reset so re-picking the same file fires `change` again.
+  input.value = ''
+}
+
+function clearCv() {
+  cvFile.value = null
+  cvError.value = null
+  filledFields.value = []
+}
+
 const formSchema = z.object({
   firstName: z.string().min(1, 'First name is required').max(100),
   lastName: z.string().min(1, 'Last name is required').max(100),
@@ -73,7 +172,7 @@ async function handleSubmit() {
 
   isSubmitting.value = true
   try {
-    await createCandidate({
+    const created = await createCandidate({
       firstName: form.value.firstName,
       lastName: form.value.lastName,
       displayName: form.value.displayName || undefined,
@@ -82,7 +181,20 @@ async function handleSubmit() {
       gender: (form.value.gender as 'male' | 'female' | 'other' | 'prefer_not_to_say') || undefined,
       dateOfBirth: form.value.dateOfBirth || undefined,
     })
-    track('candidate_added')
+    track('candidate_added', { from_cv: !!cvFile.value })
+
+    // The candidate exists either way — a failed attachment is worth saying out
+    // loud, but it must not look like the candidate wasn't created.
+    if (cvFile.value && created?.id) {
+      try {
+        await uploadDocument(created.id, cvFile.value, 'resume')
+      } catch {
+        toast.error('Candidate created, but the CV could not be attached', {
+          message: 'Open the candidate and upload it again.',
+        })
+      }
+    }
+
     await navigateTo(localePath('/dashboard/candidates'))
   } catch (err: any) {
     const message = err.data?.statusMessage ?? 'Something went wrong'
@@ -119,6 +231,63 @@ async function handleSubmit() {
       {{ submitError }}
     </div>
 
+    <!-- Fill from CV -->
+    <div class="mb-6">
+      <div
+        class="rounded-xl border border-dashed px-5 py-6 text-center transition-colors"
+        :class="isDraggingCv
+          ? 'border-brand-400 bg-brand-50/60 dark:border-brand-600 dark:bg-brand-950/30'
+          : 'border-surface-300 bg-surface-50/60 dark:border-surface-700 dark:bg-surface-900/40'"
+        @dragover.prevent="isDraggingCv = true"
+        @dragleave.prevent="isDraggingCv = false"
+        @drop.prevent="onCvDrop"
+      >
+        <!-- Extracting -->
+        <div v-if="isExtracting" class="flex items-center justify-center gap-2 text-sm text-surface-600 dark:text-surface-300">
+          <Loader2 class="size-4 animate-spin" />
+          Reading the CV…
+        </div>
+
+        <!-- Attached -->
+        <div v-else-if="cvFile" class="flex items-center justify-center gap-3">
+          <FileText class="size-4 shrink-0 text-brand-600 dark:text-brand-400" />
+          <div class="min-w-0 text-left">
+            <p class="truncate text-sm font-medium text-surface-800 dark:text-surface-200">{{ cvFile.name }}</p>
+            <p class="text-xs text-surface-500 dark:text-surface-400">
+              {{ filledFields.length > 0
+                ? `Filled ${filledFields.length} field${filledFields.length === 1 ? '' : 's'} — check them below.`
+                : 'Will be attached as their résumé.' }}
+            </p>
+          </div>
+          <button
+            type="button"
+            class="ml-1 grid size-7 shrink-0 cursor-pointer place-items-center rounded-lg text-surface-400 hover:bg-surface-100 hover:text-surface-700 dark:hover:bg-surface-800 dark:hover:text-surface-200"
+            aria-label="Remove CV"
+            @click="clearCv"
+          >
+            <X class="size-4" />
+          </button>
+        </div>
+
+        <!-- Empty -->
+        <div v-else>
+          <UploadCloud class="mx-auto size-5 text-surface-400 dark:text-surface-500" />
+          <p class="mt-2 text-sm font-medium text-surface-700 dark:text-surface-300">
+            Drop a CV to fill this in
+          </p>
+          <p class="mt-1 text-xs text-surface-500 dark:text-surface-400">
+            PDF, DOC, or DOCX — including a LinkedIn profile saved as PDF.
+          </p>
+          <label class="mt-3 inline-flex cursor-pointer items-center rounded-lg border border-surface-300 bg-white px-3 py-1.5 text-xs font-medium text-surface-700 transition-colors hover:bg-surface-50 dark:border-surface-700 dark:bg-surface-900 dark:text-surface-300 dark:hover:bg-surface-800">
+            Choose a file
+            <input type="file" accept=".pdf,.doc,.docx" class="sr-only" @change="onCvSelected" />
+          </label>
+        </div>
+      </div>
+
+      <p v-if="cvError" class="mt-2 text-xs text-warning-700 dark:text-warning-400">{{ cvError }}</p>
+    </div>
+
     <form class="space-y-5" @submit.prevent="handleSubmit">
       <!-- First Name -->
       <div>
diff --git a/server/api/candidates/extract-cv.post.ts b/server/api/candidates/extract-cv.post.ts
new file mode 100644
index 00000000..386a7da0
--- /dev/null
+++ b/server/api/candidates/extract-cv.post.ts
@@ -0,0 +1,159 @@
+import { fileTypeFromBuffer } from 'file-type'
+import { ALLOWED_MIME_TYPES, MAX_FILE_SIZE } from '../../utils/schemas/document'
+import { parseDocument } from '../../utils/resume-parser'
+import { resolveAnalysisProvider } from '../../utils/ai/resolveProvider'
+import { assertPlatformBudget, BudgetExceededError, budgetErrorToHttp } from '../../utils/ai/budget'
+import { computeCostUsdMicros } from '../../utils/ai/pricing'
+import { captureAiGeneration } from '../../utils/ai/observability'
+import { extractCandidateFromCv } from '../../utils/ai/cvExtraction'
+import { createRateLimiter } from '../../utils/rateLimit'
+
+/**
+ * POST /api/candidates/extract-cv
+ *
+ * Read a CV (PDF, DOC, DOCX) and return the contact details it contains, so
+ * the add-candidate form can be pre-filled instead of retyped. Works with any
+ * CV, including LinkedIn's own "Save to PDF" profile export.
+ *
+ * Nothing is written: no candidate, no document, no S3 object. The client
+ * holds the file and uploads it against the candidate once the recruiter has
+ * confirmed the details. That keeps a bad extraction from leaving debris
+ * behind, and keeps this endpoint safe to call repeatedly.
+ *
+ * Security:
+ *   - Auth required; gated on `candidate: ['create']` since this exists only to
+ *     feed candidate creation
+ *   - MIME type validated from magic bytes, not the Content-Type header
+ *   - Rate limited — every call costs an LLM run
+ */
+const limiter = createRateLimiter({
+  windowMs: 60_000,
+  maxRequests: 20,
+  message: 'Too many CV extractions. Please wait a moment.',
+})
+
+/** Below this, the parse produced nothing worth paying a model to read. */
+const MIN_TEXT_LENGTH = 40
+
+export default defineEventHandler(async (event) => {
+  await limiter(event)
+  const session = await requirePermission(event, { candidate: ['create'] })
+  const orgId = session.session.activeOrganizationId
+
+  // ─────────────────────────────────────────────
+  // 1. Read and validate the file
+  // ─────────────────────────────────────────────
+
+  const formData = await readMultipartFormData(event)
+  const filePart = formData?.find(part => part.name === 'file')
+
+  if (!filePart?.data || !filePart.filename) {
+    throw createError({ statusCode: 400, statusMessage: 'No file provided' })
+  }
+
+  const fileBuffer = filePart.data
+  if (fileBuffer.length > MAX_FILE_SIZE) {
+    throw createError({
+      statusCode: 413,
+      statusMessage: `File too large. Maximum size is ${MAX_FILE_SIZE / 1024 / 1024} MB`,
+    })
+  }
+
+  const detectedType = await fileTypeFromBuffer(fileBuffer)
+  let mimeType = detectedType?.mime
+
+  // file-type can't detect legacy .doc (OLE2 compound documents) — check magic bytes.
+  if (!mimeType) {
+    const OLE2_MAGIC = Buffer.from([0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1])
+    if (fileBuffer.length >= 8 && Buffer.compare(fileBuffer.subarray(0, 8), OLE2_MAGIC) === 0) {
+      mimeType = 'application/msword'
+    }
+  }
+
+  if (!mimeType || !ALLOWED_MIME_TYPES.includes(mimeType as typeof ALLOWED_MIME_TYPES[number])) {
+    throw createError({ statusCode: 400, statusMessage: 'Invalid file type. Allowed: PDF, DOC, DOCX' })
+  }
+
+  // ─────────────────────────────────────────────
+  // 2. Extract text
+  // ─────────────────────────────────────────────
+
+  const parsed = await parseDocument(fileBuffer, mimeType)
+  const text = parsed?.text?.trim() ?? ''
+
+  if (text.length < MIN_TEXT_LENGTH) {
+    throw createError({
+      statusCode: 422,
+      statusMessage: 'No readable text in this file. Scanned or image-only documents can\'t be read.',
+    })
+  }
+
+  // ─────────────────────────────────────────────
+  // 3. Resolve provider and check the budget gate
+  // ─────────────────────────────────────────────
+
+  const resolved = await resolveAnalysisProvider(orgId)
+
+  if (resolved.billingMode === 'platform') {
+    try {
+      await assertPlatformBudget(orgId)
+    } catch (err) {
+      if (err instanceof BudgetExceededError) throw budgetErrorToHttp(err)
+      throw createError({ statusCode: 503, statusMessage: 'AI budget check failed. Please try again later.' })
+    }
+  }
+
+  // ─────────────────────────────────────────────
+  // 4. Extract contact details
+  // ─────────────────────────────────────────────
+
+  const startedAt = Date.now()
+  let result: Awaited<ReturnType<typeof extractCandidateFromCv>>
+
+  try {
+    result = await extractCandidateFromCv(resolved.providerConfig, text)
+  } catch {
+    captureAiGeneration({
+      orgId,
+      userId: session.user.id,
+      feature: 'cv_contact_extraction',
+      provider: resolved.provider,
+      model: resolved.model,
+      billingMode: resolved.billingMode,
+      promptTokens: 0,
+      completionTokens: 0,
+      costUsdMicros: null,
+      latencyMs: Date.now() - startedAt,
+      status: 'failed',
+    })
+    throw createError({
+      statusCode: 502,
+      statusMessage: 'Could not read this CV right now. Please try again, or fill the form in manually.',
+    })
+  }
+
+  captureAiGeneration({
+    orgId,
+    userId: session.user.id,
+    feature: 'cv_contact_extraction',
+    provider: resolved.provider,
+    model: resolved.model,
+    billingMode: resolved.billingMode,
+    promptTokens: result.usage.promptTokens,
+    completionTokens: result.usage.completionTokens,
+    costUsdMicros: computeCostUsdMicros(
+      resolved.model,
+      result.usage.promptTokens,
+      result.usage.completionTokens,
+    ),
+    latencyMs: Date.now() - startedAt,
+    status: 'completed',
+  })
+
+  return {
+    firstName: result.extraction.firstName,
+    lastName: result.extraction.lastName,
+    email: result.extraction.email,
+    phone: result.extraction.phone,
+  }
+})
diff --git a/server/utils/ai/cvExtraction.ts b/server/utils/ai/cvExtraction.ts
new file mode 100644
index 00000000..aa6f3d8e
--- /dev/null
+++ b/server/utils/ai/cvExtraction.ts
@@ -0,0 +1,93 @@
+/**
+ * CV Contact Extraction
+ *
+ * Pulls the identity fields needed to create a candidate (name, email, phone)
+ * out of raw résumé text. Used by the "drop a CV" flow on the add-candidate
+ * form so a recruiter never retypes what the document already says.
+ *
+ * Deliberately narrow: this extracts contact details only, not skills or work
+ * history. Scoring already reads the full résumé text (see scoring.ts) — the
+ * job here is to fill a form, and a small schema keeps it cheap and reliable.
+ */
+import { z } from 'zod'
+import { generateStructuredOutput, type ProviderConfig } from './provider'
+
+/**
+ * Résumés run long and the contact block is almost always at the top. Cap the
+ * prompt so a 40-page CV can't turn a form-fill into an expensive run.
+ */
+export const MAX_EXTRACTION_CHARS = 12_000
+
+/**
+ * Every field is nullable: a LinkedIn PDF export often has no email at all,
+ * and inventing one would be worse than leaving the field blank for the
+ * recruiter to fill in.
+ */
+const cvExtractionSchema = z.object({
+  firstName: z.string().nullable().describe('Given name only, no titles or honorifics'),
+  lastName: z.string().nullable().describe('Family name only'),
+  email: z.string().nullable().describe('Personal email address, exactly as written'),
+  phone: z.string().nullable().describe('Phone number, exactly as written including country code'),
+})
+
+export type CvExtraction = z.infer<typeof cvExtractionSchema>
+
+/**
+ * Résumés run long and the contact block sits at the top, so the tail is
+ * rarely worth paying for. Truncation is by character, not token — cheap,
+ * predictable, and it only has to be roughly right.
+ */
+export function truncateForExtraction(text: string): string {
+  return text.slice(0, MAX_EXTRACTION_CHARS)
+}
+
+/**
+ * Collapse a model response into values safe to drop straight into a form.
+ * Whitespace-only and placeholder answers become null: a blank field the
+ * recruiter fills in beats a confident-looking "N/A" they have to notice.
+ */
+const PLACEHOLDER_VALUES = new Set(['n/a', 'na', 'none', 'null', 'unknown', 'not provided', 'not specified', '-', '—'])
+
+export function normalizeCvExtraction(raw: CvExtraction): CvExtraction {
+  const clean = (value: string | null): string | null => {
+    const trimmed = value?.trim()
+    if (!trimmed) return null
+    return PLACEHOLDER_VALUES.has(trimmed.toLowerCase()) ? null : trimmed
+  }
+
+  return {
+    firstName: clean(raw.firstName),
+    lastName: clean(raw.lastName),
+    email: clean(raw.email),
+    phone: clean(raw.phone),
+  }
+}
+
+const SYSTEM_PROMPT = `You extract contact details from a résumé or CV so a recruiter can create a candidate record.
+
+Rules:
+- Return only what the document actually states. Never guess, infer, or invent a value.
+- If a field is absent or you are not confident, return null for it.
+- The name belongs to the person the CV is about — not a referee, employer, or previous colleague.
+- Strip titles (Dr, Eng, Mr, Ms) and post-nominals from names.
+- Return the email and phone verbatim. Do not normalise, reformat, or correct them.
+- A LinkedIn profile export often has no email address. That is expected — return null.`
+
+/**
+ * Extract candidate contact fields from résumé text.
+ * Returns nulls rather than throwing when the document yields nothing useful.
+ */
+export async function extractCandidateFromCv(
+  config: ProviderConfig,
+  resumeText: string,
+): Promise<{ extraction: CvExtraction; usage: { promptTokens: number; completionTokens: number } }> {
+  const result = await generateStructuredOutput(config, {
+    system: SYSTEM_PROMPT,
+    prompt: `Extract the candidate's contact details from this document:\n\n${truncateForExtraction(resumeText)}`,
+    schema: cvExtractionSchema,
+    schemaName: 'cv_contact_details',
+    schemaDescription: 'Contact details of the person the CV describes',
+  })
+
+  return { extraction: normalizeCvExtraction(result.object), usage: result.usage }
+}
diff --git a/tests/unit/cv-extraction.test.ts b/tests/unit/cv-extraction.test.ts
new file mode 100644
index 00000000..d0adf25b
--- /dev/null
+++ b/tests/unit/cv-extraction.test.ts
@@ -0,0 +1,68 @@
+import { describe, expect, it } from 'vitest'
+import {
+  MAX_EXTRACTION_CHARS,
+  normalizeCvExtraction,
+  truncateForExtraction,
+} from '../../server/utils/ai/cvExtraction'
+
+describe('normalizeCvExtraction', () => {
+  it('trims values the model returns with surrounding whitespace', () => {
+    expect(normalizeCvExtraction({
+      firstName: '  Abdelrahman ',
+      lastName: 'Said\n',
+      email: ' a.said@example.com ',
+      phone: '+20 10 4044 4569 ',
+    })).toEqual({
+      firstName: 'Abdelrahman',
+      lastName: 'Said',
+      email: 'a.said@example.com',
+      phone: '+20 10 4044 4569',
+    })
+  })
+
+  it('nulls out empty and whitespace-only values', () => {
+    expect(normalizeCvExtraction({
+      firstName: '',
+      lastName: '   ',
+      email: '\n\t',
+      phone: null,
+    })).toEqual({ firstName: null, lastName: null, email: null, phone: null })
+  })
+
+  it('nulls out placeholder answers so the field reads as unanswered', () => {
+    // A LinkedIn PDF export has no email — the model must not fill the form
+    // with something that looks like an answer.
+    expect(normalizeCvExtraction({
+      firstName: 'Jane',
+      lastName: 'Doe',
+      email: 'N/A',
+      phone: 'Not provided',
+    })).toEqual({ firstName: 'Jane', lastName: 'Doe', email: null, phone: null })
+  })
+
+  it('keeps real values that merely resemble placeholders', () => {
+    expect(normalizeCvExtraction({
+      firstName: 'Nan',
+      lastName: 'Nunes',
+      email: 'none@example.com',
+      phone: null,
+    })).toEqual({
+      firstName: 'Nan',
+      lastName: 'Nunes',
+      email: 'none@example.com',
+      phone: null,
+    })
+  })
+})
+
+describe('truncateForExtraction', () => {
+  it('caps long documents so a huge CV cannot inflate the run', () => {
+    const long = 'x'.repeat(MAX_EXTRACTION_CHARS + 5_000)
+    expect(truncateForExtraction(long)).toHaveLength(MAX_EXTRACTION_CHARS)
+  })
+
+  it('leaves ordinary documents untouched', () => {
+    const cv = 'Abdelrahman Said\nSoftware Engineer\na.said@example.com'
+    expect(truncateForExtraction(cv)).toBe(cv)
+  })
+})