How do exchanges use cold bitcoin wallet while still able to automate transfers? Some exchanges mentions they use a cold wallet to keep the private key. As far as I understand cold wallet is a wallet either in an offline machine or kept in hardware.

However, it appears that transfers can still be made online on these exchanges and the underlying system will automate the signing of transaction.

How do exchanges able to maintain a cold wallet while still able to automate the process? Is it by setting up local network with limited access or by other means?
The exchanges that use cold storage keep most of their coins offline, but do have a small percentage of funds that is necessary for normal business in online wallets.