Why Lift Cables Are Not the Only Thing Holding You Up

Step into a lift and the most visible act is also the least informative: two doors close. Somewhere above or beside you, a motor turns. The car rises. Because the shaft is hidden, the mind supplies a simple picture—a box hanging from one cable.

That picture is wrong in two useful ways. A conventional traction lift normally uses multiple suspension elements, not one lonely rope. More importantly, those elements are only one layer in a system designed around the possibility that components can wear, controls can fail and people can make mistakes.

A lift is not made safe by one impossibly strong part. It is made safer by layers that fail differently.

The cable is a system, not a single thread

Modern suspension may use steel wire ropes or newer steel-reinforced belts, depending on the design. A wire rope is itself a bundle: many wires form strands, and strands form the rope. The load is then shared across multiple suspension elements.

The European Lifts Directive requires at least two independent cables or chains where those means are used, each with its own anchorage. A US construction rule for personnel hoists specifies at least three hoisting ropes for traction hoists. These are different legal regimes for different equipment, but both expose the same engineering idea: do not let a single local failure become an immediate fall.¹²

The counterweight is not a second car

In a traction lift, ropes pass over a drive sheave with the car on one side and a counterweight on the other. The counterweight commonly balances the car plus a portion of its rated load. The motor therefore moves the difference rather than lifting the whole occupied car from nothing.

This reduces required motor effort and energy, and helps create traction around the sheave. It does not “pull the car up” by itself, and it is not a substitute for brakes or safeties.

A separate device watches speed

A speed governor is mechanically linked to car movement. If the car exceeds its permitted speed, the governor trips. Depending on the system, protective actions may first interrupt power and apply the machine brake; mechanical action can then engage the car’s safety gear.

The governor matters because it does not need the normal command system to decide that an overspeed is abnormal. EU rules explicitly require an overspeed governor except where the drive design itself prevents overspeed.¹ The current ASME A17.1 safety code separately addresses speed governors, car and counterweight safeties, unintended movement, suspension, buffers and guide rails.³

The emergency brake grips the rails

The dramatic part is not a giant brake pad squeezing the rope. Safety gear is attached to the car frame and acts on the fixed guide rails. When triggered, wedges or jaws grip those rails and stop the descending car. OSHA describes them plainly as rail brakes; its rules require safeties capable of stopping and holding a car with its rated load at governor tripping speed.²⁴

The doors are part of the motion system

The landing doors you touch do not merely keep out noise. Their locking devices are safety components. Interlocks are designed so the lift does not travel with an unsafe open door and a landing door cannot normally open without a car at that landing. This is why forcing a door is not a harmless shortcut.

Controls refuse unsafe requests

A lift controller receives calls, tracks position, commands acceleration and levelling, and checks safety circuits. It also refuses conditions outside its rules. Overload protection can prevent normal starting. Final terminal devices backstop the ordinary stopping sequence. Emergency communication serves a different failure: a stopped car with people inside.

Buffers are the last layer, not a trampoline

At the bottom of a shaft are buffers for the car and counterweight. Their job is to absorb or dissipate energy if a lift reaches the terminal beyond its normal stopping position. They are not intended to make a high-speed free fall comfortable. They sit behind ordinary stopping devices, the brake, governor and safety gear.

Safety is maintained, not installed once

Redundancy only works if the separate layers remain capable of acting. Ropes or belts wear. Brakes need adjustment. Door locks are used thousands of times. Governors and safety gear must still trip as intended. Inspection, testing, maintenance and correction of defects are therefore part of the safety architecture.

The UK Health and Safety Executive says workplace lifts must be thoroughly examined by a competent person at regular intervals. New York City requires inspection and testing twice annually, combining an annual inspection with category tests; its rated-load-and-speed Category Five test occurs every five years.⁵⁶ Those intervals are jurisdiction-specific, not universal instructions, but they show why a safe design still needs an institutional system around it.

Not every lift works the same way

Hydraulic lifts raise a car using a fluid-powered jack and use different fall-prevention devices. Very slow platform lifts, construction hoists, mine winding systems and modern ropeless concepts follow other architectures and rules. Even among traction lifts, machine location, suspension media and control technology vary.

So the right conclusion is not that every lift has exactly the components in this simplified model. It is that passenger-lift safety is deliberately plural: support, sensing, stopping, containment, terminal protection and oversight are assigned to different layers.

The rope is what moves with you. The safety system is everything waiting for the journey not to go as planned.

Sources and further reading