How do antivirus vendors exclude false positives?

I had a few false positives today which I reported to the antivirus vendor who said they'd update their next definition file not to detect them.

These FP's were in some Microsoft Word templates so 100% specific to us, no some executable that you'd expect to find elsewhere.

At a basic level, how does the vendor make the exception without the pattern definitions getting ridiculously huge?