An elevator system comprising: a controller ; an elevator car operationally connected to the controller ; a first sensor configured to provide first sensor data to the controller , wherein the controller is configured to identify, from the first sensor data, a capacity parameter of the elevator car , wherein the capacity parameter includes one or more of: loaded weight; volume of available space; or volume of occupied space; a second sensor configured to provide second sensor data to the controller , wherein the controller is configured to determine, from the second sensor data, that passengers remain outside the elevator car when the elevator car is stopped at a landing and its elevator doors are open; and wherein from the first sensor data and the second sensor data, the controller is configured to determine a reduced capacity limit for the elevator car as a function of the capacity parameter; characterized in that when determining the reduced capacity limit, the controller is configured for: accumulating data related to passengers entering the elevator in response to hall calls while the elevator car is near its design capacity limit or previously determined reduced capacity limit; setting the reduced capacity limit to correlate with a predetermined boarding probability and setting a tolerance range around the reduced capacity limit; determining whether the boarding probability is within acceptable limits over time; and upon determining that the boarding probability is outside of acceptable limits over time, modifying one or both of the tolerance range and the reduced capacity limit. a controller ; an elevator car operationally connected to the controller ; a first sensor configured to provide first sensor data to the controller , wherein the controller is configured to identify, from the first sensor data, a capacity parameter of the elevator car , wherein the capacity parameter includes one or more of: loaded weight; volume of available space; or volume of occupied space; a second sensor configured to provide second sensor data to the controller , wherein the controller is configured to determine, from the second sensor data, that passengers remain outside the elevator car when the elevator car is stopped at a landing and its elevator doors are open; and wherein from the first sensor data and the second sensor data, the controller is configured to determine a reduced capacity limit for the elevator car as a function of the capacity parameter; characterized in that when determining the reduced capacity limit, the controller is configured for: accumulating data related to passengers entering the elevator in response to hall calls while the elevator car is near its design capacity limit or previously determined reduced capacity limit; setting the reduced capacity limit to correlate with a predetermined boarding probability and setting a tolerance range around the reduced capacity limit; determining whether the boarding probability is within acceptable limits over time; and upon determining that the boarding probability is outside of acceptable limits over time, modifying one or both of the tolerance range and the reduced capacity limit. accumulating data related to passengers entering the elevator in response to hall calls while the elevator car is near its design capacity limit or previously determined reduced capacity limit; setting the reduced capacity limit to correlate with a predetermined boarding probability and setting a tolerance range around the reduced capacity limit; determining whether the boarding probability is within acceptable limits over time; and upon determining that the boarding probability is outside of acceptable limits over time, modifying one or both of the tolerance range and the reduced capacity limit. <EOS>