The disclosure relates to an elevator system consisting of a plurality of elevator carriages, a shaft system, a drive system for separately moving the elevator carriages within the shaft system, as well as a safety system having a plurality of safety nodes designed to bring the elevator system into a safe operating mode if an operating mode of the elevator system, which deviates from the normal operation mode, is detected. The elevator carriages, the shaft system and the drive system form a functional unit. One of the safety nodes is always assigned to one of the functional units, wherein the safety nodes are each connected to at least another safety node through an interface for transmitting data. Each safety node includes at least one sensor, which detects an operating parameter of the corresponding assigned functional unit. A control unit evaluates the operating parameter detected by one of the sensors of the respective safety node and, taking into account the data transmitted by at least another safety node.