An elevator system (101, 201) comprising: an elevator car (103, 203) arranged within an elevator shaft and moveable between a plurality of landings; a brake configured to stop the elevator car (103, 203) from moving within the elevator shaft when the brake is applied; a safety controller (232; 236); and at least one safety device (234; 238) operatively coupled to the safety controller (232; 236); wherein the safety controller (232; 236) is configured to: monitor for a change in status of the at least one safety device (234; 238); upon detection of a change in status of the at least one safety device (234; 238) to a new status, evaluate whether the new status is a first status corresponding to an emergency situation or a second status corresponding to a non-critical situation; and apply the brake immediately to stop the elevator car (103, 203) within the elevator shaft when the new status is determined to be the first status; or allow the elevator car (103, 203) to move to one of the plurality of landings when the new status is determined to be the second status; and characterised in that when the new status is determined to be the second status the safety controller (232; 236) is further configured to: monitor a motion profile of the elevator car (103, 203) when the elevator car (103, 203) is being moved to one of the plurality of landings, the motion profile comprising information relating to the speed of the elevator car (103, 302), its position within the elevator shaft and its deceleration; and to apply the brake to stop the elevator car (103, 203) dependent on the motion profile not showing an expected level of deceleration. an elevator car (103, 203) arranged within an elevator shaft and moveable between a plurality of landings; a brake configured to stop the elevator car (103, 203) from moving within the elevator shaft when the brake is applied; a safety controller (232; 236); and at least one safety device (234; 238) operatively coupled to the safety controller (232; 236); wherein the safety controller (232; 236) is configured to: monitor for a change in status of the at least one safety device (234; 238); upon detection of a change in status of the at least one safety device (234; 238) to a new status, evaluate whether the new status is a first status corresponding to an emergency situation or a second status corresponding to a non-critical situation; and apply the brake immediately to stop the elevator car (103, 203) within the elevator shaft when the new status is determined to be the first status; or allow the elevator car (103, 203) to move to one of the plurality of landings when the new status is determined to be the second status; monitor for a change in status of the at least one safety device (234; 238); upon detection of a change in status of the at least one safety device (234; 238) to a new status, evaluate whether the new status is a first status corresponding to an emergency situation or a second status corresponding to a non-critical situation; and apply the brake immediately to stop the elevator car (103, 203) within the elevator shaft when the new status is determined to be the first status; or allow the elevator car (103, 203) to move to one of the plurality of landings when the new status is determined to be the second status; and characterised in that when the new status is determined to be the second status the safety controller (232; 236) is further configured to: monitor a motion profile of the elevator car (103, 203) when the elevator car (103, 203) is being moved to one of the plurality of landings, the motion profile comprising information relating to the speed of the elevator car (103, 302), its position within the elevator shaft and its deceleration; and to apply the brake to stop the elevator car (103, 203) dependent on the motion profile not showing an expected level of deceleration. monitor a motion profile of the elevator car (103, 203) when the elevator car (103, 203) is being moved to one of the plurality of landings, the motion profile comprising information relating to the speed of the elevator car (103, 302), its position within the elevator shaft and its deceleration; and to apply the brake to stop the elevator car (103, 203) dependent on the motion profile not showing an expected level of deceleration.