Elevator doors and why they cause most incidents

Tamsin's third term at Northcrest began on a Monday with a call that had nothing to do with controllers. A resident at the Marlowe had been struck by a closing car door, not hurt, but angry enough to phone the building manager, who phoned Lena, who sent Tamsin and Priya Sandhu. Priya found the door's reopening edge sticking on one side, adjusted it, timed the door, and wrote it up. On the drive back she told Tamsin what the term would be about. "You spent last term learning how the controller decides to move the car. This term is about the parts that stop it from hurting anyone when something goes wrong: the doors and the devices that guard them, and the governor, safeties, limits and buffers that catch a car that is going where it should not. Most of the calls you will ever get are about doors. Most of the deaths in this trade happen at doors too."

This course covers those devices. It begins with doors, because they are the part of an elevator that the public touches every day and the part that fails most often. It then works through the safety devices that act on the car itself, from the governor and the safeties to the terminal stopping devices and buffers, and ends with the emergency devices used by firefighters and by passengers trapped in a car. ELV-310 covered how the controller runs firefighters' emergency operation; here the focus is the hardware: the switches, keys, signals, lights and communication equipment, and how they are tested.

Why doors matter so much

An elevator door is a machine that opens and closes several hundred times a day, in a busy building often more than a thousand, with people walking through it, pushing carts and luggage through it, leaning on it and kicking it. Its hangers, tracks, rollers and gibs wear; its sills fill with grit; its operator, linkages and clutch drift out of adjustment. Industry service records consistently show that doors account for the largest share of elevator callbacks, often around half of all calls, and Northcrest's own records are no different. A door that fails to close keeps the car out of service, and a door that closes badly can strike a passenger.

The far more serious danger is the hoistway door. Each landing has a door that must stay closed and locked whenever the car is not at that floor. If it can be opened without the car there, a person can step into an open hoistway and fall. If a car can move with a hoistway door open, a person half in and half out of the car can be caught between the car and the landing. These are the two classic fatal door accidents, and they are why the hoistway door interlock is one of the most important safety devices on an elevator. Mechanics are at risk too: falls into hoistways and being caught by a moving car while working at an open door are among the leading causes of death among elevator workers, often after a door circuit was jumpered or a door was propped open without the hoistway being protected.

The door system at a glance

An elevator has two sets of doors. The car door, or car gate on some freight cars, travels with the car and is driven by the door operator mounted on the car top. The hoistway doors, one set at each landing, are mounted on the hoistway side of the landing entrance and have no motor of their own. When the car arrives at a floor, a clutch or vane on the car door engages rollers on the hoistway door, unlocks the interlock and drags the hoistway door open with the car door. When the car door closes, it pulls the hoistway door closed, and the hoistway door's own closer, a weight or spring, keeps it closed and locked once the car leaves. Lesson 3 describes these parts in detail, and lesson 4 explains the locks and contacts that prove the doors are closed.

Doors come in several arrangements. Single-speed doors have one panel that slides the full width. Two-speed doors have two panels on separate tracks, one moving twice as fast as the other, so they can open a wide entrance to one side; hospital cars like Holloway's use them for beds. Center-opening doors split in the middle and are quickest for a given opening width, which is why passenger cars like Quayside's use them. Older freight cars and some cars in older buildings have vertically sliding doors or swing doors at the landings; the Marlowe still has two swing hoistway doors at its lower floors, with a sliding car door.

The rules that govern doors and safety devices

The requirements for doors, interlocks, governors, safeties, terminal stopping devices, buffers and emergency devices are in the elevator code, ASME A17.1 in Washington, adopted by the Department of Labor and Industries' elevator program, with Seattle running its own permits and inspections within the city. The Canadian and US codes are published together as one harmonized document with country-specific clauses, and the clause numbers used in this course follow that shared numbering: section 2.11 covers hoistway doors, 2.12 hoistway door locking devices, 2.13 power operation of doors, 2.14 car enclosures and car doors, 2.17 car and counterweight safeties, 2.18 speed governors, 2.19 ascending car overspeed and unintended movement protection, 2.22 buffers, 2.25 terminal stopping devices and 2.27 emergency operation and signaling devices. The most recent combined edition is the 2025 edition; jurisdictions adopt editions on their own schedule, and a car must meet the edition in force when it was installed or last altered, plus any rules the jurisdiction applies to existing equipment.

Maintenance and testing requirements are in Part 8 of the code. Section 8.6 sets out the maintenance control program and the periodic tests. For governors, safeties, buffers and other safety devices, those tests come in two groups: tests done every year, called Category 1 tests in the code, and full-load, higher-speed tests done every five years, called Category 5 tests. Lesson 12 carries out a five-year test. The inspection guide ASME A17.2 describes how inspectors check each item, and Tamsin was told to keep a copy in the van.

How this course follows the work

The course follows Northcrest's jobs. At Quayside, the four-car center-opening group, Tamsin will work with Priya on closed-loop door operators, light curtains, progressive safeties and oil buffers. At Tillicum, Ray Abernethy's old geared car 1 still has a DC door operator with resistors and cams, a flyball governor and spring buffers, and its modernization is on the horizon. Holloway's hospital cars have heavy two-speed doors and the most demanding fire service and emergency power arrangements on the route. Larchmont's machine-room-less car has its governor in the hoistway and a remote governor reset. The Marlowe has swing doors, and the Brackenridge escalators appear only briefly, because ELV-330 covers escalator devices.

# Door callbacks on Route 7 over one year (illustrative branch records)
calls = {"doors and door protection": 214, "stopping accuracy": 52,
         "controller and drive": 61, "hall and car fixtures": 48,
         "machine, brake and ropes": 23, "hydraulic power units": 31, "other": 37}
total = sum(calls.values())
for kind, n in sorted(calls.items(), key=lambda kv: -kv[1]):
    share = 100 * n / total
    print(f"{kind:<28} {n:4d}  {share:5.1f} %  " + "#" * round(share / 2))
print(f"{'total':<28} {total:4d}")

doors and door protection     214   45.9 %  #######################
controller and drive           61   13.1 %  #######
stopping accuracy              52   11.2 %  ######
hall and car fixtures          48   10.3 %  #####
other                          37    7.9 %  ####
hydraulic power units          31    6.7 %  ###
machine, brake and ropes       23    4.9 %  ##
total                         466

Door problems are nearly half of Route 7's calls, which is in line with the industry pattern. Lena uses figures like these to decide where preventive maintenance time goes, and it is why Priya spends most of a maintenance visit on the doors.

Working safely at doors

Before any work at a hoistway door or on a car top, the hoistway must be made safe. Northcrest's procedure, built from the DOSH requirements Tamsin learned in ELV-110, has five parts. First, take the car off automatic operation, by inspection operation or by lockout at the mainline disconnect, depending on the task. Second, before opening a hoistway door with the access key, check where the car is; never step through an opened hoistway door without seeing the car top or the pit floor in front of you. Third, barricade an open hoistway door whenever you leave it, even for a minute, with a barricade that a person cannot walk through. Fourth, never jumper a door circuit to move a car; if the car must be moved with a door open, use the controller's inspection operation and the door bypass provisions the code and maker allow, with the hoistway protected. Fifth, before the car returns to service, prove that every door you touched closes, locks and stops the car when opened.

Priya added a sixth rule, which is hers rather than the code's: test the door the way a passenger will use it, at full speed, with the reopening device, before you leave. "The resident at the Marlowe is the person you are working for," she said. "Ride it, block it with your hand, push a cart through it. If you would not let your grandmother use it, it is not finished."