Start9, coldcard or seedsigner depending on client, air gapped signing through MicroSD (industrial), seedfan backup or Tinyseed or seedsafe.
Inheritance activations through secure vault with emergency access capabilities in time lock.