TresorIT - Detailed Review

Privacy Tools

TresorIT - Detailed Review Contents
    Add a header to begin generating the table of contents

    TresorIT - Product Overview



    Tresorit Overview

    Tresorit is a cloud storage service that specializes in providing highly secure and private data storage and sharing solutions. Here’s a brief overview of its primary function, target audience, and key features:



    Primary Function

    Tresorit’s primary function is to offer a secure cloud storage service that uses end-to-end encryption to protect user data. This means that files are encrypted on the client-side, before they are transmitted to Tresorit’s servers, ensuring that only the user and those they share the data with can access the content.



    Target Audience

    Tresorit caters to a wide range of users, from individuals to large enterprises. Its customer base includes small businesses with 0-9 employees, as well as larger companies with 100-249 employees. Geographically, its users are predominantly located in countries such as Germany, the United Kingdom, and Switzerland.



    Key Features



    End-to-End Encryption

    Tresorit uses AES-256 and TLS encryption to ensure data is secure both in transit and at rest. This encryption is client-side, meaning Tresorit itself cannot access the encrypted data.



    Cross-Platform Compatibility

    The service supports various platforms including Windows, Mac OS, Linux, Android, iOS, and major web browsers.



    File Sharing and Collaboration

    Users can share files and folders securely using either share links or by inviting collaborators. Access permissions can be set to manager, editor, or viewer levels.



    Syncing and Backup

    Tresorit allows users to sync files across all their devices and provides a backup feature to ensure data is safe in the cloud. Selective sync options are also available.



    Administrative Tools

    For business and enterprise users, Tresorit offers administrative reports, analysis, and an Admin Center for managing users, central billing, and policies.



    Data Residency Options

    Users can choose where their data is stored, with options including the US, UK, Canada, Ireland, Germany, France, Switzerland, Netherlands, Singapore, and Dubai.



    Compliance and Security

    Tresorit is compliant with GDPR and other data protection regulations. It ensures that even in the event of a server-side attack, the encrypted data remains secure and unintelligible.



    Two-Factor Authentication (2FA)

    Tresorit supports 2FA to add an extra layer of security to user accounts.

    Overall, Tresorit is a secure and reliable cloud storage solution that prioritizes user privacy and data security, making it a strong choice for individuals and organizations needing to protect sensitive information.

    TresorIT - User Interface and Experience



    User Interface

    Tresorit 3.0, for instance, introduced a completely redesigned user interface that is cleaner and easier to use. This update was aimed at making navigation simpler and providing a better overview of the user’s files and activities.

    The interface is laid out in a way that is familiar and easy to grasp, even for those who are not tech-savvy. The design is inspired by social media paradigms, making it feel comfortable and accessible to a wide range of users. The use of pastel colors and a straightforward layout contributes to this user-friendly environment.



    Ease of Use

    Using Tresorit is relatively simple. The onboarding process is extensive and guided, helping new users get familiar with the platform quickly. Upon creating an account, users are prompted to download the desktop app, and the setup process is completed through this app. However, users can switch between the desktop app and the web interface, which have a consistent look and feel.

    Features like Tresorit Drive allow users to access their files securely through their file browser without needing to store them locally, which simplifies file management. Additionally, users can pin frequently used folders to the top of their list for quicker access, and the “Recents” tab provides a centralized view of all file changes across different projects.



    User Experience

    The overall user experience is enhanced by several key features. For example, the “Pending” tab helps users keep track of tresor invitations and available licenses, making it easier to manage multiple projects and team collaborations. The interface also supports multiple languages, including English, French, German, and Spanish, which adds to its accessibility.

    Tresorit’s focus on security and privacy does not compromise its usability. The platform integrates seamlessly with various devices and browsers, allowing secure access from anywhere. Features like real-time archiving, secure file sharing, and email encryption further enhance the user experience by providing a comprehensive and secure way to manage and share files.

    In summary, Tresorit’s user interface is designed to be intuitive, clean, and easy to use, making it a user-friendly option for those seeking secure and private cloud storage solutions.

    TresorIT - Key Features and Functionality



    Tresorit Overview

    Tresorit is a cloud storage service that stands out for its strong security features and user-friendly interface, making it an excellent choice for individuals and businesses looking to protect their data. Here are the main features and how they work:

    End-to-End Encryption

    Tresorit uses zero-knowledge encryption, which means that your data is encrypted on your device before it is uploaded to the cloud. This encryption is based on AES-256 and TLS, ensuring that only you and those you authorize can access your files.

    Data Residency Options

    Business and enterprise customers can choose where their data is stored, with options including Canada, France, Germany, Ireland, Switzerland, Netherlands, Singapore, Dubai, the UK, and the USA (East and West coast). This feature is crucial for compliance with various regional data protection regulations.

    Tresors

    Tresors are encrypted parent folders that can be created from any local folder on your computer. These folders can be either unsynchronized (acting as encrypted cloud storage) or synchronized with a folder on your device. You can selectively sync subfolders within a Tresor, allowing for flexible and secure file management.

    File Sharing and Collaboration

    You can share files and folders using either email invitations or share links. When using share links, you can set controls such as expiration dates and optional passwords. Collaborators can be given different access permissions: manager, editor, or viewer, allowing you to control who can read, modify, or re-share files.

    File Request Feature

    This feature allows you to create encrypted request links that can be sent to anyone, even if they don’t have a Tresorit account. This enables secure file uploads from external parties directly into your Tresorit account.

    Gmail and Outlook Integration

    Tresorit integrates with Gmail and Outlook, enabling you to encrypt email attachments and password-protect files sent through these email services. This integration maintains your existing workflows while ensuring secure communication.

    Admin Center Dashboard

    For business and enterprise users, the Admin Center Dashboard provides a comprehensive overview of user activities, allowing administrators to set user policies, monitor activities, and generate reports. It also integrates with SIEM tools like Microsoft Sentinel.

    Active Directory Integration

    Tresorit supports Active Directory integration, which helps in synchronizing users, Tresors, and Tresor memberships, making user management more efficient.

    Two-Factor Authentication (2FA)

    Tresorit supports 2FA, adding an extra layer of security to your account by requiring both a password and a second form of verification to log in.

    Tresorit Drive

    This tool allows you to work on files stored in the cloud without downloading or syncing them to your device. While it is slower than working with local files, it is useful when security policies or limited storage on mobile devices are a concern.

    AI Integration

    While Tresorit does not explicitly highlight AI-driven features in its core functionality, the service’s advanced encryption and security protocols are developed and maintained by a team of experts, which may involve some level of AI and machine learning in the background to enhance security and efficiency. However, there is no specific information available on how AI is directly integrated into the product’s features.

    Conclusion

    In summary, Tresorit offers a secure, flexible, and user-friendly cloud storage solution with strong encryption, extensive sharing and collaboration tools, and robust administrative controls, making it a reliable choice for protecting sensitive data.

    TresorIT - Performance and Accuracy



    Performance and Accuracy of Tresorit in Privacy and Security



    Security and Encryption

    Tresorit is highly regarded for its strong security measures. It implements end-to-end encryption using AES-256, ensuring that data is encrypted on the client-side, in transit, and on the servers. This means that Tresorit servers and employees never have access to the cleartext data or the encryption keys.

    Third-Party Audits and Certifications

    Tresorit has undergone rigorous third-party security assessments, including a comprehensive review by Ernst & Young (EY) in 2019. This review included penetration testing, source code review, and a cryptographic review, all of which validated Tresorit’s claims about its end-to-end encryption and security practices.

    Compliance and Certifications

    Tresorit holds several important certifications, such as ISO 27001, GDPR, HIPAA, and FedRAMP, which further attest to its commitment to security and compliance.

    Performance

    Despite its strong focus on security, Tresorit does not significantly compromise on performance. Speed tests have shown that Tresorit maintains good upload and download speeds, even with large file transfers, without impacting CPU performance.

    Limitations and Areas for Improvement

    While Tresorit is highly secure, there are a few areas to consider:

    Business and Enterprise Plans
    In these plans, a company-designated Recovery Administrator may have the ability to decrypt and read stored data, which could be a concern for some users.

    Public Key Infrastructure
    A recent study highlighted that Tresorit, like some other cloud storage providers, lacks public key infrastructure and out-of-band verification, which could make it vulnerable to key replacement attacks. However, Tresorit has plans to address this by presenting public key fingerprints to users when sharing folders in 2025.

    Data Privacy

    Tresorit collects some metadata about the data stored, such as the name of the Tresor, its size, and the names of the members. Additionally, they may use personal information like usage logs and analytics, which can be shared with third parties under certain conditions.

    Conclusion

    In summary, Tresorit performs exceptionally well in terms of security and privacy, backed by rigorous third-party audits and certifications. While there are some minor limitations and areas for improvement, Tresorit remains a strong choice for those prioritizing data security and privacy.

    TresorIT - Pricing and Plans

    Tresorit offers a range of pricing plans to cater to different user needs, from personal use to enterprise solutions. Here’s a breakdown of their pricing structure and the features included in each plan:

    Free Plan (Basic)

    • Storage: 3 GB
    • File Size Limit: 500 MB
    • Devices: Connect up to two devices
    • Sharing: Secure file sharing with encrypted download links (10 active share links, files up to 250 MB)
    • Syncing: Sync files and folders between devices

    This plan is suitable for external contributors and those who need basic collaboration features.



    Personal Plan

    • Price: $13.99 per month
    • Storage: 1 TB of encrypted storage
    • Features: Includes all the features from the Basic plan, plus additional security and syncing capabilities.

    This plan is ideal for individuals who need more storage and advanced security features.



    Business Standard Plan

    • Price: $18 per month
    • Storage: 1 TB of encrypted storage per user
    • Features: Includes all the features from the Personal plan, plus additional business-oriented features such as enhanced collaboration tools.

    This plan is designed for small to medium-sized businesses.



    Business Plus Plan

    • Price: $24 per month per user
    • Storage: 2 TB of encrypted storage per user
    • Features: Includes all the features from the Business Standard plan, with increased storage and additional business features.

    This plan is suitable for larger teams and businesses that require more storage and advanced collaboration tools.



    Professional Plan

    • Price: $33.99 per month
    • Storage: 4 TB of encrypted storage
    • Features: Includes all the features from the Business Plus plan, with even more storage and advanced security features.

    This plan is ideal for professionals and businesses that require a high level of security and large storage capacity.



    Enterprise Plan

    • Price: Custom pricing
    • Storage: Starts from 50 users, with customizable storage needs
    • Features: Includes all the features from the Professional plan, plus additional enterprise-level features such as premium consulting and integration services.

    This plan is tailored for large enterprises with specific needs and requirements.



    Additional Notes

    • Free Trial: Tresorit offers a 14-day free trial for its Personal, Professional, and Business plans, allowing users to experience advanced features before committing to a plan.
    • Annual Pricing: Discounts are available for annual payments.
    • Add-ons: Optional paid add-ons such as eSign and encrypted Outlook integration are available for additional fees.

    TresorIT - Integration and Compatibility



    Tresorit Overview

    Tresorit, a secure cloud storage and file-sharing service, offers extensive integration and compatibility features that make it a versatile tool for various users.



    Platform Compatibility

    Tresorit is compatible with a wide range of platforms, including:

    • Windows: Supports Windows 10 or later.
    • Mac: Compatible with macOS 10.15 or later.
    • Linux: Works with Ubuntu 16.04 and later, as well as other Linux distributions with a window manager from the last four years. However, NixOS is not supported due to its non-standard file structure.
    • Mobile Devices: Available on Android 5.0 or later and iOS 15 or later.


    Browser Compatibility

    For web access, Tresorit supports several browsers:

    • Google Chrome: One of the latest two versions.
    • Microsoft Edge: One of the latest two versions.
    • Mozilla Firefox: One of the latest two versions or the latest ESR version.
    • Safari: Version 13 or later.
    • Internet Explorer 11 and Microsoft Edge Legacy: No longer supported as of August 2021.


    Integrations

    Tresorit integrates with various tools to enhance productivity and security:

    • Single Sign-On (SSO): Supports integration with Microsoft Azure AD, Google Workspace, and Okta. This allows users to access Tresorit using their existing company credentials, leveraging central password policies and 2-step verification.
    • Outlook Integration: Users can generate end-to-end encrypted secure links directly in Outlook using the Tresorit plugin, replacing risky email attachments.
    • Active Directory Integration: Allows synchronization of users and Tresorit memberships with directory services.


    Additional Features

    Tresorit also offers several features that enhance its usability and security:

    • Tresorit Drive: Enables users to access cloud-stored files directly from their desktop without needing to sync them, saving disk space.
    • Secure File Sharing: Features like Tresorit Send allow for secure file sharing with options such as expiration dates, password protection, and access limits.
    • Data Residency: Supports data residency options for businesses requiring GDPR or HIPAA compliance.


    Security and Privacy

    Tresorit’s integration with other tools does not compromise its strong security and privacy features:

    • End-to-End Encryption: Files are encrypted on the user’s device and remain encrypted until accessed by the intended recipient, ensuring that not even Tresorit can access the contents.
    • Zero-Knowledge Authentication: User passwords never leave the device, maintaining control over confidential security information.

    Overall, Tresorit’s broad compatibility and integration capabilities make it a secure and user-friendly option for managing and sharing files across various devices and platforms.

    TresorIT - Customer Support and Resources



    Support Options



    Support Channels

    • For support inquiries, users can submit a request through the contact form on the Tresorit website, allowing them to reach out to the support team directly.
    • Although Tresorit does not have a phone number for customer support, users can contact the team via email. Specific email addresses are provided for different types of inquiries, such as press, authority requests, and security questions.
    • Live chat support is also available, providing a quick and interactive way to resolve issues.


    Knowledge Base and Resources

    • Tresorit maintains an extensive Knowledge Base that includes helpful guides and articles. This resource is invaluable for users looking to troubleshoot issues or learn more about the features and best practices of the service.
    • The website offers detailed information on security, compliance, and encryption, helping users understand how their data is protected. This includes explanations of end-to-end encryption, client-side integrity protection, and compliance with various regulations such as ISO 27001, GDPR, and HIPAA.


    Additional Tools and Features

    • Tresorit provides features like 2-Step Verification, IP filtering, and timeout policies, which can be managed through the Admin Center. This allows administrators to define and modify security policies to enhance the security of their organization.
    • Users can monitor device and user statistics, revoke access from users and devices, and reset lost passwords, all of which contribute to enhanced security and control.
    • The service also includes tools for secure external collaboration, such as shared data rooms and the ability to limit file downloads and revoke access at any time, ensuring that data remains encrypted even when shared with external partners.


    Training and Onboarding

    • Tresorit offers migration and onboarding support to help new users get started. Additionally, custom training sessions are available for enterprise customers, ensuring a smooth transition to the new system.
    By providing these support options and resources, Tresorit ensures that users have the tools and information they need to securely manage and collaborate on their data.

    TresorIT - Pros and Cons



    Advantages of Tresorit

    Tresorit is a cloud storage service that stands out for several key advantages, particularly in the areas of security, compliance, and functionality.

    End-to-End Encryption

    Tresorit uses AES-256 and TLS for end-to-end encryption, ensuring that your data is secure from the moment it leaves your device until it is stored on their servers. This zero-knowledge encryption means that even Tresorit employees cannot access your encrypted data.

    Compliance with Regulations

    Tresorit is compliant with major regulations such as GDPR, HIPAA, CCPA, TISAX, FINRA, and ITAR, making it a reliable choice for businesses that need to adhere to strict data protection standards.

    Secure File Sharing

    The service offers secure file exchange features, including the ability to share files with external users while maintaining encryption. You can also protect shared files with passwords, email notifications, watermarks, and open limits.

    Multi-Platform Support

    Tresorit supports a wide range of platforms, including Windows, Mac OS, Linux, Android, iOS, and major web browsers, ensuring you can access your data from any device.

    Data Residency Options

    Business and enterprise customers can choose from various data residency options, including the US, UK, Canada, Ireland, Germany, France, Switzerland, Netherlands, Singapore, and Dubai.

    Two-Factor Authentication (2FA)

    Tresorit supports 2FA, adding an extra layer of security to your account.

    Third-Party Security Audits

    The service has undergone independent security assessments by firms like Ernst & Young, which have validated its security claims.

    Integration and Productivity

    Tresorit integrates with tools like Google, Outlook, and offers features like secure virtual data rooms for collaborative work, enhancing productivity and confidentiality.

    Disadvantages of Tresorit

    While Tresorit offers many benefits, there are also some notable drawbacks to consider.

    Cost

    Tresorit is one of the more expensive cloud storage services available. The paid plans, which offer more storage and features, come with a higher price tag compared to other cloud storage providers.

    Limited Free Plan

    The free plan is quite limited, offering only 3 GB of storage, which may not be sufficient for many users.

    Complexity

    Some users find Tresorit complicated to use, especially for those who are not familiar with advanced cloud storage features.

    Immediate Deletion Option

    There is a concern about the “permanent immediate deletion” option, which can be risky if an intruder gains access and deletes data without the possibility of recovery. Users have suggested a trash system with a time delay before permanent deletion.

    Performance

    Tresorit is not particularly fast, and it lacks block-level sync, which can affect performance, especially for large files. Overall, Tresorit is a strong choice for businesses and organizations that prioritize security, compliance, and advanced features, but it may not be the best fit for personal use due to its cost and complexity.

    TresorIT - Comparison with Competitors



    When Comparing Tresorit to Other Cloud Storage Services



    Privacy and Security

    Tresorit is renowned for its stringent privacy and security measures. It employs end-to-end (zero-knowledge) encryption using AES-256 and TLS, ensuring that only the user has access to the encrypted data. This level of encryption is a significant differentiator, as it prevents even Tresorit itself from accessing the user’s data. In contrast, competitors like Dropbox do not offer the same level of privacy. Dropbox uses strong security protocols but does not have zero-knowledge encryption and has a history of data breaches and sharing user data with third parties.

    Data Residency Options

    Tresorit provides extensive data residency options, allowing business and enterprise customers to choose where their data is stored from a range of locations including Canada, France, Germany, Ireland, Switzerland, the Netherlands, Singapore, Dubai, the UK, and the USA. This flexibility is crucial for companies subject to various regional data protection regulations like GDPR and CCPA.

    Additional Security Features

    Tresorit includes several advanced security features such as two-factor authentication (2FA), administrative reports and analysis, and the ability to set up a Recovery Administrator for business and enterprise plans. However, it’s important to note that this Recovery Administrator can decrypt and read stored data, which might be a consideration for some users.

    File Sharing and Collaboration

    Tresorit offers secure file sharing with features like password-protected links, expiration dates for links, and download limits. It also integrates seamlessly with Gmail and Outlook, allowing users to send encrypted email attachments. However, Tresorit does not support real-time collaboration outside of its own ecosystem, unlike Dropbox, which has integrations with various productivity apps.

    User Experience and Compatibility

    Tresorit is user-friendly and compatible with a wide range of platforms including Windows, Mac OS, Linux, Android, iOS, and major web browsers. It offers an intuitive interface and supports up to 10 devices per user.

    Alternatives

    For users who prioritize different aspects of cloud storage, here are some alternatives:
    • pCloud and Icedrive: These services offer lifetime plans and different pricing models, but they may not match Tresorit’s level of security and privacy features.
    • Dropbox: While Dropbox is more focused on productivity and collaboration, it lacks the strong privacy measures that Tresorit provides. However, it is a good option for those who need integrations with various business and personal applications.
    • Sync.com: This service also offers strong security and privacy features, including zero-knowledge encryption, but it may not have the same level of data residency options as Tresorit.
    In summary, Tresorit stands out for its uncompromising approach to privacy and security, making it an excellent choice for individuals and businesses that need to store and share sensitive data securely. However, users who require more integrations with productivity apps or real-time collaboration might find other services more suitable.

    TresorIT - Frequently Asked Questions



    Frequently Asked Questions about Tresorit



    Q: What kind of encryption does Tresorit use?

    Tresorit uses end-to-end encryption, specifically AES-256, to ensure that your data is encrypted on your device, during transit, and while stored on Tresorit’s servers. This encryption is combined with TLS for added security.

    Q: Where is my data stored with Tresorit?

    By default, your data is stored in data centers in Ireland. However, business and enterprise customers have the option to choose from various data residency locations, including the US, UK, Canada, Germany, France, Switzerland, Netherlands, Singapore, and Dubai.

    Q: Is Tresorit compliant with major data protection regulations?

    Yes, Tresorit is compliant with several major data protection regulations, including GDPR, HIPAA, CCPA, ISO 27001, ITAR, FINRA, and TISAX Standards. This ensures that your data is handled in accordance with these stringent regulations.

    Q: What are the pricing options for Tresorit?

    Tresorit offers several pricing plans:
    • Personal: €9.99 per month for secure cloud storage for personal use.
    • Professional: €23.99 per month for secure collaboration for professionals.
    • Business Standard: €12.00 per user/month (minimum 3 users) for basic secure collaboration.
    • Business Plus: €16.00 per user/month (minimum 3 users) for enhanced control and security.
    • Enterprise: Custom pricing for enterprise-level security and scalability (minimum 50 users).


    Q: Does Tresorit support two-factor authentication?

    Yes, Tresorit supports two-factor authentication (2FA) to add an extra layer of security to your account.

    Q: Can I share files securely with external users using Tresorit?

    Yes, Tresorit offers a File Request feature that allows you to create encrypted request links for people to upload files without needing a Tresorit account. Additionally, you can share files and control access, including restricting downloads and printing of shared files.

    Q: How does Tresorit handle personal data and usage logs?

    Tresorit collects some personal information, such as usage logs and analytics, which may be shared with third parties, government officials, or others to protect their legal rights and interests. However, the data you store is encrypted and remains private, with only you, shared users, and any Recovery Administrators able to access it.

    Q: Is Tresorit available on multiple platforms?

    Yes, Tresorit is available on various platforms, including Windows, Mac OS, Linux, Android, iOS, and major web browsers. This ensures you can access your files across all your devices and browsers.

    Q: Can I recover deleted files and previous versions with Tresorit?

    Yes, Tresorit allows you to recover deleted files and access previous versions of your files. This feature helps ensure that no important information is lost.

    Q: How does Tresorit ensure administrative control for businesses?

    Tresorit provides administrative reports, analysis, and advanced control features for businesses. Admins can define security policies, monitor devices and user statistics, and revoke access from users and devices to enhance the security of their organization.

    Q: Does Tresorit integrate with email services like Gmail and Outlook?

    Yes, Tresorit offers integration with Gmail and Outlook, allowing you to encrypt email attachments and password-protect files sent through these services. This is particularly useful for secure communication with coworkers and external partners.

    TresorIT - Conclusion and Recommendation



    Final Assessment of Tresorit

    Tresorit stands out as a highly secure and privacy-focused cloud storage solution, making it an excellent choice for individuals and organizations that prioritize data protection.

    Security and Privacy

    Tresorit’s core strength lies in its end-to-end encryption using AES-256 and TLS, ensuring that your data is encrypted on your device, in transit, and on their servers. The zero-knowledge architecture means that even Tresorit’s administrators cannot access your files, providing an additional layer of security. The service is governed by Swiss privacy laws, which are considered some of the most stringent in the world. This adds an extra layer of protection for users, as these laws offer more substantial data protection than those in the US or EU.

    Features and Functionality

    Tresorit offers a range of features that make it highly versatile. It supports multiple platforms, including Windows, Mac OS, Linux, Android, iOS, and major web browsers. The service includes fine control over synchronization, deleted version recovery, and the ability to synchronize files across all your devices and browsers. For businesses, Tresorit provides administrative reports and analysis, as well as the ability to specify data residency options, which is crucial for compliance with regulations like GDPR and CCPA. The platform also integrates seamlessly with Gmail and Outlook, allowing secure email attachments and password-protected files.

    Who Would Benefit Most

    Tresorit is particularly beneficial for:
    • Businesses and Enterprises: Organizations that need to protect sensitive data, comply with strict data protection regulations, and maintain control over data access will find Tresorit’s features and security measures highly valuable.
    • Healthcare and Legal Professionals: These industries often handle highly sensitive data and can benefit from Tresorit’s secure collaboration tools and compliance with data privacy regulations.
    • Individuals with High Privacy Needs: Anyone who requires strong data protection and privacy, such as journalists, activists, or individuals dealing with confidential personal documents, will appreciate Tresorit’s security features.


    Recommendation

    If you are looking for a cloud storage solution that prioritizes security and privacy, Tresorit is an excellent choice. Its end-to-end encryption, zero-knowledge architecture, and compliance with Swiss privacy laws make it one of the most secure options available. However, for personal use with minimal security requirements, Tresorit might be more expensive than necessary. The free plan is limited, and the paid plans are relatively pricey compared to other cloud storage services. Therefore, it is best suited for those who need advanced security features and are willing to invest in them. In summary, Tresorit is a top-tier solution for anyone who values strong data protection and privacy, especially in professional and sensitive data handling contexts.

    Scroll to Top