CIRA Canadian Shield is a free DNS service from the Canadian Internet Registration Authority (CIRA), the non-profit that manages the .ca domain registry. It is aimed at households and has three tiers: Private only switches the DNS resolver, without filtering; Protected blocks known malware and phishing domains; Family additionally blocks pornographic content. Encrypted lookups use DNS over HTTPS and DNS over TLS, and the service is configured on a router, on individual devices or through a mobile app.
CIRA is based in Canada, so it sits outside the EU and the EEA. According to coverage at launch, the servers run in Canadian data centres, and a 2020 legal summary of the terms of use says only individuals and families residing in Canada may use the service, with organisations pointed to a paid product. CIRA states that logs are kept for up to 24 hours unless anomalous behaviour is detected. The service is not open source. For a European organisation, Canadian Shield is therefore mainly a reference point for a non-profit resolver outside the EU, not an obvious business choice.