There are (or should be) records kept by the issuers of the securities, updated at regular intervals, and they would have those off-site.