Do you have contacts that you don't want to send penalties too?
To achieve this is quite simple, any 'Group' which has no policies applied to it, will effectively become a whitelist.
> Create a New Group
> Add your contacts into the group, either individually or via contact groups.
> Do not assign a policy, and hit Save.
Now, any invoices sent to these contacts will have no policies issued to them.