Paper Backups and Safety Deposit Boxes: Documenting What Lives Outside the Office

Paper seed phrase backups stored outside the office—typically in bank safety deposit boxes—create a documentation challenge. The backup exists, which is good. But if nobody records which box, which bank branch, and who holds the key, the backup becomes invisible during audits and dangerous during emergencies.

The invisible backup problem

We encounter this pattern in roughly one-third of custody mapping engagements. A director mentions “we have a backup at the bank” during the session, but the spreadsheet shows only hardware wallet entries. The paper backup has no ledger row, no named custodian for the box key, and no verification schedule.

When the accountant asks about total reserve holdings, the paper backup’s associated wallet address may not appear in any reconciliation because the team reconciles only the devices they physically handle at the office.

What to document (without exposing the seed)

You should never store seed phrase words in audit documentation. What you document instead:

• Backup type: Paper seed phrase, metal plate, or encrypted note
• Storage location: Bank name, branch, box number (internal reference)
• Key holder: Person or persons authorised to access the box
• Associated wallet: The hardware wallet or address this backup restores
• Verification schedule: How often someone confirms the backup still exists and is legible
• Last verified date: Timestamp of the most recent check

This metadata gives auditors confidence that backups exist and are managed, without placing seed words in files that circulate beyond key holders.

Verification without opening the box monthly

Quarterly verification is reasonable for most small businesses. The verifier confirms the box key is accessible, visits the bank, opens the box, and checks that the backup material is present and undamaged. They do not need to transcribe seed words—they confirm presence and condition.

The verification is recorded on the reconciliation sheet: date, verifier name, box reference, condition note. If the backup is missing or damaged, an incident response procedure (defined in your controls manual) activates immediately.

Separating box key from device key

A common controls gap: the same person holds both the hardware wallet and the safety deposit box key. If that person leaves the company or loses both items, recovery becomes complicated. Separation of duties means different people hold device access and backup access, with documented procedures for when both are needed (wallet restoration).

Starting the documentation

If your business has a paper backup in a bank box that does not appear in any written inventory, add a row to your wallet inventory spreadsheet today. Name the box location, key holder, and associated wallet. Schedule a verification within the next thirty days. This single action closes the most frequent gap we find during Reserve Ledger Audits.