Comment by ArnoVW

In legal terms Evernote is not "data controller" but "data processor". They are not responsible for ensuring conformity with retention rules.