Is Evernote secure

Answer 1

Yes. According to Evernote your data is safe.

From Evernote:

"Security and privacy are extremely important topics for Evernote users, and for good reason. Evernote would like to provide a single service to manage your memories for many years. To achieve this, we must provide a very high level of system and data security while offering users a variety of choices to manage their own privacy requirements. Here's a high-level overview of some of the ways in which your data is protected by Evernote.

• When you add a note to the service, it is secured like your email would be at a high-end email provider. This means that your notes are stored in a private, locked cage at a guarded data center that can only be accessed by a small number of Evernote operations personnel. Administrative maintenance on these servers can only be performed through secure, encrypted communications by the same set of people. All network access to these servers is similarly protected by a set of firewalls and hardened servers.

• User data is not publicly accessible (e.g. via search engines) unless a user explicitly publishes one or more of their notebooks, in which case they may be accessed by other users.

• Your login information is only transmitted to the servers in encrypted form over SSL, and your passwords are not directly stored on any of our systems.

• And, for all of our members, all note data is transferred over SSL, not just your login credentials.

We also offer enhanced privacy options that would not be available from services like email:

• If you have sensitive text that you would like to remember (passwords, PINs, credit card numbers), you can encrypt that text in our clients using a passphrase that is never transmitted to Evernote. This encrypted text can only be decrypted and read on one of your computers after you've re-entered the encryption passphrase. The sensitive text is not readable on our servers or on your computer by anyone who does not know the passphrase.

• If you have some notes that you only want to access from a single computer, you can place these into a "Local Notebook" on our Windows or Mac client. Notes in a Local Notebook are never transmitted to our service, so they aren't accessible from the web, or from your other computers. This may allow a greater level of privacy for some notes, at the expense of the accessibility and reliability you would get from a private note on the service.

We recognize that user choice is an important component of privacy and security. We believe that no single option is going to meet the needs of all users, so we aim to offer a set of tools that let people balance their needs for accessibility, privacy and control.

Several of the company's founders come from a strong encryption background (founders of CoreStreet, acquired by ActiveIdentity). For Evernote's consumer product, the current encryption algorithms are chosen more for exportability under the Commerce Department rather than strength, since our software permits the encryption of arbitrary user data with no escrow.

We'd be interested in offering something stronger in the future when we have the staffing to fight the lengthy export battle, but until then, we continue to advise users to use an external encryption solution to encrypt important files and then add these encrypted into Evernote.
Evernote's service is primarily a consumer cloud memory service. This is reflected in our pricing model (free for most users with a single "Premium" tier of $45/year). While we're certainly happy to support professionals to use Evernote within their offices, we aren't actively pursuing an enterprise sales model (a la Salesforce.com).
As a consumer internet service, we don't pursue enterprise certifications such as FISMA, HIPAA, etc. We manage our own servers at a Tier 3 data center (Quality Tech) in Santa Clara, which is itself SAS70 certified. All software and data is managed by Evernote's internal IT/Operations staff."

Source: https://www.evernote.com/shard/s2/note/a2c4a559-cc9f-4a03-83bf-dd6b7705b83f/ensupport/faq#b=c88dd0ac-32c1-4bc5-b3f4-50612072e0ad&n=a2c4a559-cc9f-4a03-83bf-dd6b7705b83f