Write to a person, not a form.
Each address below reaches the team that can actually resolve it, with the response time we hold ourselves to. If you pick the wrong one we will route it ourselves rather than send it back to you.
Universities, polytechnics and colleges of education. Tell us the institution, your role and roughly how many students are enrolled. We come back with the agreement and a date for the walkthrough — there is no sales stage in between, and it costs the institution nothing.
Ninety minutes with your registry, on a video call or in your office in Lagos, Abuja or Enugu. We run a sample of your real file through the upload preview so you can see what Bona reads and what it rejects before anyone signs anything.
You do not need to write to us for sandbox — keys appear the moment you verify your email at developers.bona.ng, with no approval gate. Write to us for production access, a KYB review, Tier 2 eligibility or an architecture conversation.
Security questionnaires, the data processing agreement, the sub-processor list, penetration test reports under NDA, and anything to do with the NDPA 2023 or GAID 2025. Our Data Protection Officer is Barrister Chidinma Eze.
A claim that will not complete, a check you do not recognise, or a record that says something wrong. Most of it is faster from the app itself — but if you are stuck, write and say what you were trying to do. Include your NSID if you have one; never send us your NIN.
Quote the QV reference from your receipt. If we could not answer, the refund is automatic and already on its way to the card or account you paid from — you do not need to ask for it, and writing to us will not make it faster.
Interviews, figures, and access to aggregate cohort data for research under a written agreement. We do not provide individual records to anyone, in any circumstance, including to journalists and including to researchers.
Lagos, and on campuses most weeks.
14B Ozumba Mbadiwe Avenue
Victoria Island, Lagos
Nigeria
NDPC · Data Controller of Major Importance
We do not need it and we do not want it in an inbox. If an identity check is needed it happens inside the app, against NIMC, and we hold only a token afterwards.
A QV reference from a receipt, a req_ id from an API error, or a BNA- ticket number. Every error state in this product shows you a reference precisely so that one line replaces a paragraph.
Tell us the NSID and roughly when. We can see what was returned and why, and if the underlying record is wrong we route it to the institution that owns it — you do not have to chase a registry yourself.