Ballet does not keep any copies of the BIP38 wallet passphrase entropy or private key entropy on our database or anywhere else. The passphrase entropy and private key entropy are deleted and overwritten immediately after the manufacturing process. Since we do not have possession of that information, the coins on your Ballet wallet are not at risk, even if our database or backend system were hacked or physically accessed by an attacker. The passphrase entropy and private key entropy are contained in non-electronic form on the physical wallet itself, and nowhere else.
If Ballet’s database or backend system is hacked, will the coins on my Ballet wallet be at risk?
Ballet Support