A safety system of a passenger conveyance system, the safety system comprising: a first safety sensor operable to provide a first sensor signal indicative of a safety condition of the passenger conveyance system; a second safety sensor operable to provide a second sensor signal indicative of the safety condition; a drive unit and a first brake unit; a safety device operable to process the first and second sensor signals to determine a safety state of the passenger conveyance system, wherein the safety device is operable to control the drive unit and the first brake unit based on the safety state of the passenger conveyance system; wherein the safety device includes a multi-core processor that includes a first processing core and a second processing core, the first processing core is operable to receive the first sensor signal directly from the first safety sensor and the second sensor signal directly from the second safety sensor, and the second processing core is operable to receive the first sensor signal directly from the first safety sensor and the second sensor signal directly from the second safety sensor, and the first processing core is operable to process the first sensor signal and the second sensor signal and the second processing core is operable to process the first sensor signal and the second sensor signal to determine the safety state of the passenger conveyance system; wherein the safety device further includes a safety control unit, the safety control unit being operable to receive signals from the first and second processing cores; and wherein the safety system further comprises a second brake unit; characterised in that: the safety control unit is operable to control the drive unit and the first brake unit based on the signals received from the first and second processing cores; and each of the first and second processing cores is operable to control the second brake unit by providing a signal indicative of a safety state of the passenger conveyance system to the second brake unit. a first safety sensor operable to provide a first sensor signal indicative of a safety condition of the passenger conveyance system; a second safety sensor operable to provide a second sensor signal indicative of the safety condition; a drive unit and a first brake unit; a safety device operable to process the first and second sensor signals to determine a safety state of the passenger conveyance system, wherein the safety device is operable to control the drive unit and the first brake unit based on the safety state of the passenger conveyance system; wherein the safety device includes a multi-core processor that includes a first processing core and a second processing core, the first processing core is operable to receive the first sensor signal directly from the first safety sensor and the second sensor signal directly from the second safety sensor, and the second processing core is operable to receive the first sensor signal directly from the first safety sensor and the second sensor signal directly from the second safety sensor, and the first processing core is operable to process the first sensor signal and the second sensor signal and the second processing core is operable to process the first sensor signal and the second sensor signal to determine the safety state of the passenger conveyance system; wherein the safety device further includes a safety control unit, the safety control unit being operable to receive signals from the first and second processing cores; and wherein the safety system further comprises a second brake unit; characterised in that: the safety control unit is operable to control the drive unit and the first brake unit based on the signals received from the first and second processing cores; and each of the first and second processing cores is operable to control the second brake unit by providing a signal indicative of a safety state of the passenger conveyance system to the second brake unit. the safety control unit is operable to control the drive unit and the first brake unit based on the signals received from the first and second processing cores; and each of the first and second processing cores is operable to control the second brake unit by providing a signal indicative of a safety state of the passenger conveyance system to the second brake unit.