Proof of reserves

How can outsiders verify what an organisation holds? On-chain data anyone can read, without taking anyone's word for it.